Sep 22 04:31:33 nativespace-cdp sshd[796276]: Connection closed by 159.100.136.21 port 53356 [preauth]
Sep 22 04:36:32 nativespace-cdp sshd[797453]: Connection closed by 159.100.136.21 port 34808 [preauth]
Sep 22 04:40:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 04:40:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:40:12 nativespace-cdp sudo[799550]: pam_unix(sudo:session): session closed for user root
Sep 22 04:41:34 nativespace-cdp sshd[800110]: Connection closed by 159.100.136.21 port 43938 [preauth]
Sep 22 04:46:32 nativespace-cdp sshd[801565]: Connection closed by 159.100.136.21 port 53626 [preauth]
Sep 22 04:51:34 nativespace-cdp sshd[802637]: Connection closed by 159.100.136.21 port 34682 [preauth]
Sep 22 04:56:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 04:56:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:56:31 nativespace-cdp sudo[803590]: pam_unix(sudo:session): session closed for user root
Sep 22 04:56:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 04:56:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:56:31 nativespace-cdp sudo[803600]: pam_unix(sudo:session): session closed for user root
Sep 22 04:56:34 nativespace-cdp sshd[803611]: Connection closed by 159.100.136.21 port 42918 [preauth]
Sep 22 04:56:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 04:56:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:56:36 nativespace-cdp sudo[803614]: pam_unix(sudo:session): session closed for user root
Sep 22 04:56:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=agproduc user-2=still user-3=stephani user-4=leereyn1 user-5=jarvisin user-6=spectrum user-7=theblack user-8=hodgesonweb user-9=ulsukarm user-10=booff user-11=foundation user-12=markward user-13=vantagep user-14=athenare user-15=connect9 user-16=lbscrmod user-17=maflemin user-18=hhdugcor user-19=lbhyisi user-20=magichat user-21=martsblo user-22=dickemery123 user-23=ptkxhsbt user-24=wilsonsw user-25=megacards user-26=musorguk user-27=lakesan1 user-28=brmrjxl user-29=strathar user-30=atestord user-31=sarafoundation user-32=accooper user-33=ianrayne user-34=connectedshoppin user-35=thqkgnbz user-36=gilpin user-37=milloyco user-38=elecleis user-39=hubmaster user-40=fetch user-41=carsinyo user-42=clarkass user-43=firstrel user-44=costestimatorco user-45=firstred user-46=highlegh user-47=southlon
Sep 22 04:56:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ultbcrra user-49=seftvta user-50=jonhartl user-51=firstres user-52=coursemc user-53=opaiscyx user-54=innovat1 user-55=stuartge user-56=askhform user-57=nativene user-58=alexadmin user-59=skyfirec user-60=bedfords user-61=newstoda user-62=belle user-63=ggaaorgu user-64=bemadonn user-65=nstriton user-66=brighto1 user-67=vivienn1 user-68=firstre2 user-69=oneoarco user-70=battlere user-71=beauty user-72=darkstar user-73=eatspam user-74=dhyana user-75=fawcettd user-76=burydropin user-77=nsceres user-78=bwppodcast user-79=zebrapho user-80=steve user-81=sibtoncc user-82=asandcoc user-83=hirefootballgame user-84=eugincou user-85=courseme user-86=cambria1 user-87=cathski user-88=ninejimm user-89=reliable user-90=cwsocial user-91=howardon user-92=paulmca1 user-93=pugwash user-94=smrszyqg user-95=isleofwi user-96=nomistakes user-97=hidden user-98=tigerlet user-99=barbersh user-100=nscdp user-101=foods
Sep 22 04:56:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=leftie user-103=fortunaz user-104=health2045 user-105=lkpier user-106=firstre5 user-107=steakbridieme user-108=donnychicago user-109=philmcph user-110=ctedorgu user-111=hodgsonmail user-112=ranxterc user-113=outdoorc user-114=branko user-115=romaldki user-116=lucy user-117=attlebor user-118=onlycont user-119=chrisdal user-120=mcdermos user-121=david user-122=nbhavers user-123=careers user-124=tomandle user-125=jennimil user-126=dancinggardener user-127=stagingerris user-128=ladburyp user-129=kategilpin user-130=design user-131=tstardom user-132=oubpgvbx user-133=what user-134=havantho user-135=sketchy user-136=cath user-137=nvihkvu user-138=bakery user-139=crrtipdl user-140=sosevalu user-141=nove user-142=boldover feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 04:56:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 04:56:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:56:37 nativespace-cdp sudo[803621]: pam_unix(sudo:session): session closed for user root
Sep 22 04:56:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 22 04:56:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:56:39 nativespace-cdp sudo[803633]: pam_unix(sudo:session): session closed for user root
Sep 22 04:56:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 22 04:56:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:56:40 nativespace-cdp sudo[803639]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 22 04:57:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 04:57:10 nativespace-cdp sudo[803767]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 04:57:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 22 04:57:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:11 nativespace-cdp sudo[803773]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 22 04:57:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:13 nativespace-cdp sudo[803780]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 22 04:57:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:15 nativespace-cdp sudo[803786]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 22 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:16 nativespace-cdp sudo[803797]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 22 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:17 nativespace-cdp sudo[803810]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 22 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:22 nativespace-cdp sudo[803817]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 22 04:57:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:22 nativespace-cdp sudo[803918]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 22 04:57:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:23 nativespace-cdp sudo[803923]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 22 04:57:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:30 nativespace-cdp sudo[804000]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 22 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 04:57:32 nativespace-cdp sudo[804058]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 22 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 22 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 22 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 04:57:33 nativespace-cdp sudo[804064]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 04:57:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 22 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 22 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 22 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:57:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 04:57:34 nativespace-cdp sudo[804071]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 04:57:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 22 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 22 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 22 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:57:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 04:57:36 nativespace-cdp sudo[804078]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 22 04:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 04:57:45 nativespace-cdp sudo[804198]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 04:57:45 nativespace-cdp sudo[804204]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 04:57:45 nativespace-cdp sudo[804210]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 22 04:57:45 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 04:57:45 nativespace-cdp sudo[804216]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 04:57:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 22 04:57:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:48 nativespace-cdp sudo[804253]: pam_unix(sudo:session): session closed for user root
Sep 22 04:57:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 22 04:57:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:57:48 nativespace-cdp sudo[804259]: pam_unix(sudo:session): session closed for user root
Sep 22 04:58:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 22 04:58:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 04:58:56 nativespace-cdp sudo[804783]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 04:58:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 22 04:58:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:58:56 nativespace-cdp sudo[804789]: pam_unix(sudo:session): session closed for user root
Sep 22 04:58:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 22 04:58:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:58:57 nativespace-cdp sudo[804795]: pam_unix(sudo:session): session closed for user root
Sep 22 04:58:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 22 04:58:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:58:58 nativespace-cdp sudo[804801]: pam_unix(sudo:session): session closed for user root
Sep 22 04:58:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 22 04:58:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:58:58 nativespace-cdp sudo[804810]: pam_unix(sudo:session): session closed for user root
Sep 22 04:59:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 22 04:59:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:59:02 nativespace-cdp sudo[804833]: pam_unix(sudo:session): session closed for user root
Sep 22 04:59:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 22 04:59:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:59:02 nativespace-cdp sudo[804854]: pam_unix(sudo:session): session closed for user root
Sep 22 04:59:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 22 04:59:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:59:10 nativespace-cdp sudo[804935]: pam_unix(sudo:session): session closed for user root
Sep 22 04:59:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 22 04:59:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 04:59:12 nativespace-cdp sudo[804997]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 04:59:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 22 04:59:12 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 22 04:59:12 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 22 04:59:12 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:59:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 04:59:12 nativespace-cdp sudo[805003]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 04:59:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 22 04:59:12 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 22 04:59:12 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 22 04:59:12 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:59:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 04:59:30 nativespace-cdp sudo[805008]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 22 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 04:59:40 nativespace-cdp sudo[805183]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 22 04:59:40 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 22 04:59:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 22 04:59:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 04:59:40 nativespace-cdp sudo[805189]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 22 04:59:40 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 22 04:59:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 22 04:59:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 04:59:40 nativespace-cdp sudo[805195]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 04:59:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 22 04:59:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:59:42 nativespace-cdp sudo[805234]: pam_unix(sudo:session): session closed for user root
Sep 22 04:59:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 22 04:59:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:59:43 nativespace-cdp sudo[805239]: pam_unix(sudo:session): session closed for user root
Sep 22 05:00:08 nativespace-cdp sshd[805492]: Invalid user mc from 82.196.9.140 port 35574
Sep 22 05:00:08 nativespace-cdp sshd[805492]: input_userauth_request: invalid user mc [preauth]
Sep 22 05:00:08 nativespace-cdp sshd[805492]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 05:00:08 nativespace-cdp sshd[805492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.9.140
Sep 22 05:00:10 nativespace-cdp sshd[805492]: Failed password for invalid user mc from 82.196.9.140 port 35574 ssh2
Sep 22 05:00:11 nativespace-cdp sshd[805492]: Received disconnect from 82.196.9.140 port 35574:11: Bye Bye [preauth]
Sep 22 05:00:11 nativespace-cdp sshd[805492]: Disconnected from 82.196.9.140 port 35574 [preauth]
Sep 22 05:00:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 22 05:00:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 05:00:21 nativespace-cdp sudo[805543]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 05:00:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 22 05:00:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:00:21 nativespace-cdp sudo[805550]: pam_unix(sudo:session): session closed for user root
Sep 22 05:00:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 22 05:00:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:00:22 nativespace-cdp sudo[805555]: pam_unix(sudo:session): session closed for user root
Sep 22 05:00:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 22 05:00:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:00:22 nativespace-cdp sudo[805566]: pam_unix(sudo:session): session closed for user root
Sep 22 05:00:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 22 05:00:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:00:23 nativespace-cdp sudo[805581]: pam_unix(sudo:session): session closed for user root
Sep 22 05:00:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 22 05:00:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:00:23 nativespace-cdp sudo[805588]: pam_unix(sudo:session): session closed for user root
Sep 22 05:00:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 22 05:00:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:00:35 nativespace-cdp sudo[805687]: pam_unix(sudo:session): session closed for user root
Sep 22 05:00:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 22 05:00:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 05:00:39 nativespace-cdp sudo[805748]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 05:00:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 22 05:00:39 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 22 05:00:39 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 22 05:00:39 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:00:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 05:00:40 nativespace-cdp sudo[805755]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 05:00:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 22 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 22 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 22 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:00:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 05:00:53 nativespace-cdp sudo[805761]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 05:00:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 22 05:00:53 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 22 05:00:53 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 22 05:00:53 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:00:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 05:00:54 nativespace-cdp sudo[805838]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 05:01:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 22 05:01:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 05:01:01 nativespace-cdp sudo[806031]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 05:01:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 22 05:01:01 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 22 05:01:01 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 22 05:01:01 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:01:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 05:01:02 nativespace-cdp sudo[806037]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 05:01:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 22 05:01:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 22 05:01:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 22 05:01:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:01:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 05:01:02 nativespace-cdp sudo[806043]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 05:01:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 22 05:01:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 22 05:01:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 22 05:01:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:01:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 05:01:02 nativespace-cdp sudo[806051]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 05:01:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 22 05:01:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:04 nativespace-cdp sudo[806091]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 22 05:01:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:04 nativespace-cdp sudo[806096]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 22 05:01:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:05 nativespace-cdp sudo[806109]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 22 05:01:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:06 nativespace-cdp sudo[806114]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 22 05:01:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 22 05:01:06 nativespace-cdp sudo[806125]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 22 05:01:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 22 05:01:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:07 nativespace-cdp sudo[806131]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 22 05:01:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:07 nativespace-cdp sudo[806136]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 22 05:01:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:07 nativespace-cdp sudo[806141]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 22 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 05:01:31 nativespace-cdp sudo[806236]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 22 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:32 nativespace-cdp sudo[806242]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 22 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:32 nativespace-cdp sudo[806248]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:33 nativespace-cdp sshd[806261]: Connection closed by 159.100.136.21 port 51654 [preauth]
Sep 22 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 22 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:33 nativespace-cdp sudo[806264]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 22 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:01:45 nativespace-cdp sudo[806347]: pam_unix(sudo:session): session closed for user root
Sep 22 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 22 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 05:01:48 nativespace-cdp sudo[806406]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 22 05:01:48 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 22 05:01:48 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 22 05:01:48 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 05:01:49 nativespace-cdp sudo[806412]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 22 05:01:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 22 05:01:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 22 05:01:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 05:02:04 nativespace-cdp sudo[806419]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 22 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 05:02:10 nativespace-cdp sudo[806574]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 22 05:02:10 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 22 05:02:10 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 22 05:02:10 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 05:02:11 nativespace-cdp sudo[806580]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 22 05:02:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 22 05:02:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 22 05:02:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 22 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 05:02:11 nativespace-cdp sudo[806586]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 22 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:13 nativespace-cdp sudo[806624]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 22 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:13 nativespace-cdp sudo[806630]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 22 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 22 05:02:29 nativespace-cdp sudo[806811]: pam_unix(sudo:session): session closed for user fortunaz
Sep 22 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 22 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:30 nativespace-cdp sudo[806817]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 22 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:30 nativespace-cdp sudo[806822]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 22 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:30 nativespace-cdp sudo[806826]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 22 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:33 nativespace-cdp sudo[806848]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 22 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:33 nativespace-cdp sudo[806855]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 22 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:39 nativespace-cdp sudo[806924]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=agproduc WpToolkitNotification send_admin_auto_updates_notification available_updates_text= available_updates_list= installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 22 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:49 nativespace-cdp sudo[807109]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807234]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807237]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807240]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807243]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807246]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807249]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807252]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807255]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807258]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807261]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807264]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807267]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807270]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807273]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807276]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807279]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807282]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807285]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:55 nativespace-cdp sudo[807288]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807291]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807294]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807298]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807301]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807304]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807307]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807310]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807313]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807316]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807319]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807322]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807325]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807328]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807331]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807334]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807337]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807340]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807343]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807346]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807349]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807352]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807355]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807358]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807361]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807364]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807367]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807370]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807373]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807377]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807380]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807383]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:56 nativespace-cdp sudo[807386]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807389]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807392]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807395]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807399]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807402]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807405]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807408]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807412]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807417]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807420]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807423]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807426]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807426]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807429]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807432]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807435]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807438]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807441]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807444]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807447]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807450]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807453]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807456]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807459]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807462]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807465]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807468]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807471]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807474]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807477]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807480]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807483]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807486]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:57 nativespace-cdp sudo[807489]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807492]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807497]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807500]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807504]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807507]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807510]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807514]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807517]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807520]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807523]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807526]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807529]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807532]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807535]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807538]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807541]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807544]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807547]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807550]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807553]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807556]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807559]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807562]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807565]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807568]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807571]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807574]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807577]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807580]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807583]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807586]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:58 nativespace-cdp sudo[807589]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807592]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807595]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807598]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807602]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807605]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807608]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807611]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807614]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807617]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807620]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807623]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807626]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807629]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807632]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807635]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807638]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807641]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807644]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807647]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807650]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807653]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807656]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807659]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807663]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807666]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807669]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807672]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807675]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807678]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807681]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807684]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807687]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807690]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807693]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807696]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807699]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807702]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807706]: pam_unix(sudo:session): session closed for user root
Sep 22 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:02:59 nativespace-cdp sudo[807709]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807712]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807715]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807718]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807722]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807725]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807729]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807732]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807735]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807738]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807741]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807744]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807747]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807750]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807753]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807756]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807759]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807762]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807765]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807768]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807771]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807774]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807777]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807780]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807783]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807786]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807789]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807792]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807795]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807798]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807801]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807804]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807807]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807810]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807814]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807817]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807820]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:00 nativespace-cdp sudo[807823]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807826]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807829]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807832]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807837]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807840]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807845]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807857]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807861]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807864]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807867]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807870]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807873]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807877]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807880]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807883]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807887]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807890]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807893]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807896]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807899]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807902]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807906]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807909]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807912]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807916]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807919]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807922]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807925]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807928]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807931]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807934]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807939]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:01 nativespace-cdp sudo[807942]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/design/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:02 nativespace-cdp sudo[807945]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/aberdeen-guesthouses.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:02 nativespace-cdp sudo[807948]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/aberdeen-guesthouses.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:02 nativespace-cdp sudo[807951]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/accooper/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:02 nativespace-cdp sudo[807955]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/agproduc/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:02 nativespace-cdp sudo[807961]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/altrincham -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:03 nativespace-cdp sudo[807964]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-content
Sep 22 05:03:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:03 nativespace-cdp sudo[807967]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-config.php
Sep 22 05:03:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:03 nativespace-cdp sudo[807970]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/.wp-toolkit-ignore
Sep 22 05:03:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:03 nativespace-cdp sudo[807974]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/amarawetherall.me.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:03 nativespace-cdp sudo[807977]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/amarawetherall.me.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:03 nativespace-cdp sudo[807981]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/amcalenan -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[807984]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-content
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[807989]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-config.php
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[807992]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/.wp-toolkit-ignore
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[807995]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/amcalenan -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[807998]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-content
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[808001]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-config.php
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[808004]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/.wp-toolkit-ignore
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[808007]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/thqkgnbz/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[808010]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/thqkgnbz/public_html/testwp/wp-content
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[808013]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/thqkgnbz/public_html/testwp/wp-config.php
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[808016]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/thqkgnbz/public_html/testwp/.wp-toolkit-ignore
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[808019]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/sinclairmanagement -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:05 nativespace-cdp sudo[808022]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/onlycont/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:24 nativespace-cdp sudo[808025]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/onlycont/public_html/wp/wp-content
Sep 22 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:24 nativespace-cdp sudo[808094]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/onlycont/public_html/wp/wp-config.php
Sep 22 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:24 nativespace-cdp sudo[808097]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/onlycont/public_html/wp/.wp-toolkit-ignore
Sep 22 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:24 nativespace-cdp sudo[808100]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/asandcoc/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:24 nativespace-cdp sudo[808103]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/asandcoc/public_html/blog/wp-content
Sep 22 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:24 nativespace-cdp sudo[808109]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/asandcoc/public_html/blog/wp-config.php
Sep 22 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:24 nativespace-cdp sudo[808112]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/asandcoc/public_html/blog/.wp-toolkit-ignore
Sep 22 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:24 nativespace-cdp sudo[808115]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/askhform/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:25 nativespace-cdp sudo[808118]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:25 nativespace-cdp sudo[808121]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/athenars.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:25 nativespace-cdp sudo[808124]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/athenars.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:25 nativespace-cdp sudo[808127]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/attlebor/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:25 nativespace-cdp sudo[808130]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/auchendennanltd.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:25 nativespace-cdp sudo[808133]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/auchendennanltd.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:25 nativespace-cdp sudo[808136]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/backinawhile -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:25 nativespace-cdp sudo[808139]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/backinawhile -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:25 nativespace-cdp sudo[808143]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/opaiscyx/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:26 nativespace-cdp sudo[808147]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bwppodcast/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:30 nativespace-cdp sudo[808151]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/bargeton.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:30 nativespace-cdp sudo[808166]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/bargeton.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:30 nativespace-cdp sudo[808169]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/battlere/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:31 nativespace-cdp sudo[808172]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/battlere/public_html/home/wp-content
Sep 22 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:31 nativespace-cdp sudo[808175]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/battlere/public_html/home/wp-config.php
Sep 22 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:31 nativespace-cdp sudo[808178]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/battlere/public_html/home/.wp-toolkit-ignore
Sep 22 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:31 nativespace-cdp sudo[808181]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bedfords/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:31 nativespace-cdp sudo[808184]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/bedfords/public_html/wp-content
Sep 22 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:31 nativespace-cdp sudo[808188]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/bedfords/public_html/wp-config.php
Sep 22 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:32 nativespace-cdp sudo[808193]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/bedfords/public_html/.wp-toolkit-ignore
Sep 22 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:32 nativespace-cdp sudo[808196]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/belle/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:32 nativespace-cdp sudo[808199]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bemadonn/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:32 nativespace-cdp sudo[808202]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/bhlabour.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808206]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-content
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808224]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-config.php
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808227]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/../wp-config.php
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808230]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-content
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808234]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-config.php
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808237]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/../wp-config.php
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808240]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808243]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-config.php
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808247]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/.wp-toolkit-ignore
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808250]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/bhlabour.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808253]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-content
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808256]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-config.php
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808260]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/../wp-config.php
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808263]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-content
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808266]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-config.php
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808269]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/../wp-config.php
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808272]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content
Sep 22 05:03:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:37 nativespace-cdp sudo[808275]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-config.php
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808278]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/.wp-toolkit-ignore
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808281]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/birmingham -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808284]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-content
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808288]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-config.php
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808291]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/.wp-toolkit-ignore
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808295]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/blackburn -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808298]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-content
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808301]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-config.php
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808304]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/.wp-toolkit-ignore
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808307]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/BattleofBritain -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808310]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldover-graphic-design.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808314]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808317]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808320]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808323]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldover-graphic-design.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808326]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808329]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 22 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:38 nativespace-cdp sudo[808332]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 22 05:03:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:39 nativespace-cdp sudo[808335]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:39 nativespace-cdp sudo[808338]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-content
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808345]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-config.php
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808348]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/.wp-toolkit-ignore
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808351]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808354]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808357]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808360]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldver.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808363]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldver.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808366]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/bolton -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808369]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-content
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808373]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-config.php
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808376]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/.wp-toolkit-ignore
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:40 nativespace-cdp sudo[808379]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/booff/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:42 nativespace-cdp sudo[808382]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bramptonabbotts.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:42 nativespace-cdp sudo[808389]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bramptonabbotts.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:42 nativespace-cdp sudo[808392]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bridstow-school.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:42 nativespace-cdp sudo[808395]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bridstow-school.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:42 nativespace-cdp sudo[808398]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808402]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brmrjxl/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808405]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/burnley -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808408]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-content
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808412]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-config.php
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808416]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/.wp-toolkit-ignore
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808419]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/burtonupontrent -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808422]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-content
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808426]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-config.php
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808429]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/.wp-toolkit-ignore
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808432]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/bury -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808435]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-content
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808439]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-config.php
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808442]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/.wp-toolkit-ignore
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808445]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/burydropin/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808448]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cambria1/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:43 nativespace-cdp sudo[808451]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/cambridge -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808454]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/candidacanbefun.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808457]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/candidacanbefun.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808460]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/crete/wordpress -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808463]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/crete/wordpress -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808466]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/catherinejonesart.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808469]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/catherinejonesart.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808472]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808475]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808479]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808482]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808485]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channel-capital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808488]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channel-capital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808491]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808494]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808497]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channelcapital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808500]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channelcapital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808503]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/chorley -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808506]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-content
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808509]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-config.php
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808512]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/.wp-toolkit-ignore
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808515]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/chorleyhandyman.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:44 nativespace-cdp sudo[808518]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/chorleyhandyman.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808521]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808524]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808529]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808532]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808535]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/christchurchfod.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808538]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/christchurchfod.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808541]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/churchdownclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808544]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/churchdownclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808547]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownmvc.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808550]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownmvc.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808554]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownvillagebowls.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808557]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownvillagebowls.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808560]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/clark.associates -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808563]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/clark.associates -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:45 nativespace-cdp sudo[808566]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808569]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808574]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/clerks -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808577]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/cmvc.skyfire-designs.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808580]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/code/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808583]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/colingrieve.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808586]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/colingrieve.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808589]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/connect9/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808592]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/www.coriniumcapital.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808595]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/www.coriniumcapital.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:46 nativespace-cdp sudo[808598]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/costestimatorco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:51 nativespace-cdp sudo[808601]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/costestimatorco/public_html/wp-content
Sep 22 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:51 nativespace-cdp sudo[808612]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/costestimatorco/public_html/wp-config.php
Sep 22 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:51 nativespace-cdp sudo[808615]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/costestimatorco/public_html/.wp-toolkit-ignore
Sep 22 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:51 nativespace-cdp sudo[808618]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oubpgvbx/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:52 nativespace-cdp sudo[808621]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/coventry -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:52 nativespace-cdp sudo[808624]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-content
Sep 22 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:52 nativespace-cdp sudo[808629]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-config.php
Sep 22 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:52 nativespace-cdp sudo[808632]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/.wp-toolkit-ignore
Sep 22 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:52 nativespace-cdp sudo[808635]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ctedorgu/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808638]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/cvs.media -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808641]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/cvs.media -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808644]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cwsocial/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808648]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-content
Sep 22 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808652]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-config.php
Sep 22 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808655]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/.wp-toolkit-ignore
Sep 22 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808658]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cwsocial/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808661]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-content
Sep 22 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808664]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-config.php
Sep 22 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:53 nativespace-cdp sudo[808667]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/.wp-toolkit-ignore
Sep 22 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:54 nativespace-cdp sudo[808670]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dancinggardener/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:54 nativespace-cdp sudo[808673]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dancinggardener/public_html/wp-content
Sep 22 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:54 nativespace-cdp sudo[808679]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dancinggardener/public_html/wp-config.php
Sep 22 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:54 nativespace-cdp sudo[808682]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dancinggardener/public_html/.wp-toolkit-ignore
Sep 22 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:54 nativespace-cdp sudo[808685]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/darkstar/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:54 nativespace-cdp sudo[808688]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ddlc.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:54 nativespace-cdp sudo[808691]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ddlc.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:54 nativespace-cdp sudo[808694]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/derby -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808697]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-content
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808700]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-config.php
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808703]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/.wp-toolkit-ignore
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808706]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/dev.boldover.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808709]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/dev.boldover.co.uk/wp-content
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808712]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/dev.boldover.co.uk/wp-config.php
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808715]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/dev.boldover.co.uk/.wp-toolkit-ignore
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808718]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/dev.brightonhovelabour.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808722]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/devdev -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808725]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/Devon_2012 -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808728]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dhyana/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:55 nativespace-cdp sudo[808731]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dhyana/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808734]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dickemery123/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808737]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dickemery123/public_html/wp/wp-content
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808740]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dickemery123/public_html/wp/wp-config.php
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808743]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dickemery123/public_html/wp/.wp-toolkit-ignore
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808746]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/disfigurines -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808749]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/disfigurines -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808752]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808755]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808758]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808762]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808766]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808769]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808772]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808775]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808778]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/dogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808781]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/dogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:56 nativespace-cdp sudo[808784]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/beauty/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:57 nativespace-cdp sudo[808787]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/carsinyo/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808790]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/wp-content
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808799]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/wp-config.php
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808802]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/../wp-config.php
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808805]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/../wp-includes
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808809]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-content
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808812]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-config.php
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808816]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/.wp-toolkit-ignore
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808820]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wp-content
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808826]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wp-config.php
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808831]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/.wp-toolkit-ignore
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808835]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/donnychicago/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808838]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/drutopia.co -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808843]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/drybrookband.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808846]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/drybrookband.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808849]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/drybrookband.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808853]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/drybrookband.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:58 nativespace-cdp sudo[808856]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/dudley -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:59 nativespace-cdp sudo[808859]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-content
Sep 22 05:03:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:59 nativespace-cdp sudo[808863]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-config.php
Sep 22 05:03:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:59 nativespace-cdp sudo[808866]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/.wp-toolkit-ignore
Sep 22 05:03:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:03:59 nativespace-cdp sudo[808869]: pam_unix(sudo:session): session closed for user root
Sep 22 05:03:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/eacha.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:03:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:00 nativespace-cdp sudo[808872]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/eacha.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:00 nativespace-cdp sudo[808876]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/eacha.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:00 nativespace-cdp sudo[808879]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/eatspam/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:00 nativespace-cdp sudo[808882]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cathski/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:00 nativespace-cdp sudo[808885]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/eugincou/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:00 nativespace-cdp sudo[808888]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/fallgame.info -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:00 nativespace-cdp sudo[808891]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/fancydresspiratecostumes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:00 nativespace-cdp sudo[808894]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fawcettd/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:01 nativespace-cdp sudo[808897]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/fellowshipofkilmarnockchurches.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:01 nativespace-cdp sudo[808901]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/fellowshipofkilmarnockchurches.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:01 nativespace-cdp sudo[808909]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fetch/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:02 nativespace-cdp sudo[808919]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808922]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-content
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808963]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-config.php
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808966]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/.wp-toolkit-ignore
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808969]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-content
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808972]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-config.php
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808975]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/.wp-toolkit-ignore
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808978]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-content
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808981]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-config.php
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808984]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/.wp-toolkit-ignore
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808987]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-content
Sep 22 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:15 nativespace-cdp sudo[808990]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[808993]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[808996]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[808999]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809002]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809005]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809008]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809011]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809014]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809017]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809020]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809023]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809026]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809029]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809032]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809035]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809038]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809041]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809044]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809047]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809050]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809053]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809056]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809059]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809062]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809065]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809068]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809071]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809074]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809077]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809080]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809083]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809087]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809090]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809093]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809096]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809099]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809102]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/.wp-toolkit-ignore
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809105]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-content
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809108]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-config.php
Sep 22 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:16 nativespace-cdp sudo[809111]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809114]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809117]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809120]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809123]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809126]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809129]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809132]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809135]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809138]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809141]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809144]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809147]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809150]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809153]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809156]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809160]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809164]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809167]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809171]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809174]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809177]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809180]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809184]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809187]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809190]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809193]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809196]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809199]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809203]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809206]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809211]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809214]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809218]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809222]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809225]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809228]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809231]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-content
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809234]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-config.php
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:17 nativespace-cdp sudo[809237]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/.wp-toolkit-ignore
Sep 22 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809240]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809243]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809246]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809250]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809253]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809256]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809259]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809263]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809266]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809269]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809272]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809275]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809278]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809281]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809284]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809287]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809290]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809293]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809296]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809299]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809302]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809305]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809308]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809311]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809314]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809317]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809320]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809323]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809326]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809329]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809333]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809336]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809339]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809342]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809345]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809348]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809351]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-content
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809355]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-config.php
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809358]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/.wp-toolkit-ignore
Sep 22 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:18 nativespace-cdp sudo[809361]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-content
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809364]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-config.php
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809367]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/.wp-toolkit-ignore
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809370]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-content
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809373]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-config.php
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809376]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/.wp-toolkit-ignore
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809379]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-content
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809382]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-config.php
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809385]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/.wp-toolkit-ignore
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809388]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-content
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809391]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-config.php
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809394]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/.wp-toolkit-ignore
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809397]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wp-content
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809400]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wp-config.php
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809403]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/.wp-toolkit-ignore
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809406]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstred/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809409]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstres/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809412]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstres/public_html/wp-content
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809415]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstres/public_html/wp-config.php
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809418]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstres/public_html/.wp-toolkit-ignore
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809421]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstrel/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:19 nativespace-cdp sudo[809426]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre2/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809429]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre2/public_html/wp-content
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809432]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre2/public_html/wp-config.php
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809435]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre2/public_html/.wp-toolkit-ignore
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809438]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/fletcherjackson.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809442]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/fletcherjackson -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809445]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/fletcherjackson.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809448]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809451]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-content
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809454]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-config.php
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809457]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/.wp-toolkit-ignore
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809460]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809463]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809466]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809469]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestedgebenefice.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809472]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestedgebenefice.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809475]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestrc.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809478]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestrc.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:20 nativespace-cdp sudo[809482]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cath/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:21 nativespace-cdp sudo[809485]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:25 nativespace-cdp sudo[809490]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-content
Sep 22 05:04:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:25 nativespace-cdp sudo[809501]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-config.php
Sep 22 05:04:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:25 nativespace-cdp sudo[809504]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/.wp-toolkit-ignore
Sep 22 05:04:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:25 nativespace-cdp sudo[809507]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809510]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-content
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809513]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-config.php
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809516]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/.wp-toolkit-ignore
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809519]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/gainford-inventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809522]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/gainford-inventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809525]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/getgotdelivered.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809528]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/getgotdelivered.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809531]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809534]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/asandcoc/public_html/global -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809537]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/grantham -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809540]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-content
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809543]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-config.php
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809546]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/.wp-toolkit-ignore
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809549]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/graydimensions.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809552]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/graydimensions.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809555]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/halfanedit -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809558]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/halifax -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809561]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-content
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809564]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-config.php
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809567]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/.wp-toolkit-ignore
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809570]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/harryclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809573]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/harryclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:26 nativespace-cdp sudo[809576]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/havantho/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:27 nativespace-cdp sudo[809580]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/health2045/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:28 nativespace-cdp sudo[809591]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/health2045/public_html/wp-content
Sep 22 05:04:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:28 nativespace-cdp sudo[809595]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/health2045/public_html/wp-config.php
Sep 22 05:04:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:28 nativespace-cdp sudo[809598]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/health2045/public_html/.wp-toolkit-ignore
Sep 22 05:04:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:28 nativespace-cdp sudo[809601]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/hellositex -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:28 nativespace-cdp sudo[809604]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/hellositex -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:28 nativespace-cdp sudo[809607]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/help -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:28 nativespace-cdp sudo[809610]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/highlegh/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809613]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hirefootballgame/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809621]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hodgsonmail/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809624]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/homebuyinghelp.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809627]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/homebuyinghelp.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809630]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html/homovision -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809633]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-content
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809637]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-config.php
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809640]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/.wp-toolkit-ignore
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809643]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/howardon/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809646]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/huddersfield -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809649]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-content
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809652]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-config.php
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809655]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/.wp-toolkit-ignore
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:31 nativespace-cdp sudo[809658]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/hyperchro.me -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:32 nativespace-cdp sudo[809661]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-content
Sep 22 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:32 nativespace-cdp sudo[809665]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-config.php
Sep 22 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:32 nativespace-cdp sudo[809669]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/.wp-toolkit-ignore
Sep 22 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:32 nativespace-cdp sudo[809672]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/hyperchrome -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:32 nativespace-cdp sudo[809675]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ianrayne/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:32 nativespace-cdp sudo[809678]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/images -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:32 nativespace-cdp sudo[809681]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/impactconsultancy.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:32 nativespace-cdp sudo[809684]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/impactconsultancy.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:32 nativespace-cdp sudo[809687]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/innovat1/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:33 nativespace-cdp sudo[809690]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/innovat1/public_html/www -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:33 nativespace-cdp sudo[809694]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/innovat1/public_html/www -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:33 nativespace-cdp sudo[809697]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:39 nativespace-cdp sudo[809700]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:04:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:39 nativespace-cdp sudo[809716]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:04:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:39 nativespace-cdp sudo[809719]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:04:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:39 nativespace-cdp sudo[809722]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:04:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:39 nativespace-cdp sudo[809725]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:04:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:39 nativespace-cdp sudo[809728]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:04:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:39 nativespace-cdp sudo[809731]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809734]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809737]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809740]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809743]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809746]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809749]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809752]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809755]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809759]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809762]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809765]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809768]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809771]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809774]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/inventory-pro.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809777]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/inventory-pro.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809780]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/ipadinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:40 nativespace-cdp sudo[809783]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/ipadinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:41 nativespace-cdp sudo[809786]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:41 nativespace-cdp sudo[809790]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:41 nativespace-cdp sudo[809795]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:41 nativespace-cdp sudo[809798]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:41 nativespace-cdp sudo[809801]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:41 nativespace-cdp sudo[809804]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:41 nativespace-cdp sudo[809807]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:41 nativespace-cdp sudo[809810]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/irvinekilmarnockpresbytery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:46 nativespace-cdp sudo[809813]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/irvinekilmarnockpresbytery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:46 nativespace-cdp sudo[809833]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/isleofwi/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:47 nativespace-cdp sudo[809836]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/isleofwi/public_html/wp-content
Sep 22 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:47 nativespace-cdp sudo[809842]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/isleofwi/public_html/wp-config.php
Sep 22 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:47 nativespace-cdp sudo[809845]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/isleofwi/public_html/.wp-toolkit-ignore
Sep 22 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:47 nativespace-cdp sudo[809848]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/isleofwightguesthouse.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:47 nativespace-cdp sudo[809851]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/isleofwightguesthouse.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:47 nativespace-cdp sudo[809854]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:48 nativespace-cdp sudo[809857]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:48 nativespace-cdp sudo[809860]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/jarvisin/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:48 nativespace-cdp sudo[809863]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/jennimil/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809866]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jennimil/public_html/wp-content
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809871]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jennimil/public_html/wp-config.php
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809874]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jennimil/public_html/.wp-toolkit-ignore
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809877]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/gilpin/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809880]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/jlive.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809883]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/jlive.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809886]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/jonhartl/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809889]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jonhartl/public_html/wp-content
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809892]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jonhartl/public_html/wp-config.php
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809895]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jonhartl/public_html/../wp-config.php
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809898]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/joomla -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:49 nativespace-cdp sudo[809901]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bemadonn/public_html/justbengals.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:50 nativespace-cdp sudo[809904]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bemadonn/public_html/justbengals.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:50 nativespace-cdp sudo[809907]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/kategilpin/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:51 nativespace-cdp sudo[809910]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/katieclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:51 nativespace-cdp sudo[809915]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/katieclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:51 nativespace-cdp sudo[809918]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/kess2012.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:52 nativespace-cdp sudo[809922]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/kess2012.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:52 nativespace-cdp sudo[809929]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/kidderminster -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:52 nativespace-cdp sudo[809932]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-content
Sep 22 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:52 nativespace-cdp sudo[809935]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-config.php
Sep 22 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:52 nativespace-cdp sudo[809938]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/.wp-toolkit-ignore
Sep 22 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:52 nativespace-cdp sudo[809941]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/seftvta/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:52 nativespace-cdp sudo[809944]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/Koro -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:52 nativespace-cdp sudo[809949]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ladburyp/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:53 nativespace-cdp sshd[809925]: Invalid user reza from 116.204.180.162 port 53150
Sep 22 05:04:53 nativespace-cdp sshd[809925]: input_userauth_request: invalid user reza [preauth]
Sep 22 05:04:53 nativespace-cdp sshd[809925]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 05:04:53 nativespace-cdp sshd[809925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.204.180.162
Sep 22 05:04:54 nativespace-cdp sudo[809952]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/old/wp-content
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809959]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/old/wp-config.php
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809962]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/old/.wp-toolkit-ignore
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809965]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/wp-content
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809968]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/wp-config.php
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809971]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/.wp-toolkit-ignore
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809974]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/wp-content
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809977]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/wp-config.php
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809980]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/.wp-toolkit-ignore
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809983]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lakesan1/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809986]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbscrmod/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:54 nativespace-cdp sudo[809989]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:55 nativespace-cdp sudo[809992]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ledburyfoodbank.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:55 nativespace-cdp sudo[809996]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ledburyfoodbank.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:55 nativespace-cdp sudo[809999]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/leereyn1/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:55 nativespace-cdp sudo[810002]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:55 nativespace-cdp sshd[809925]: Failed password for invalid user reza from 116.204.180.162 port 53150 ssh2
Sep 22 05:04:55 nativespace-cdp sshd[809925]: Received disconnect from 116.204.180.162 port 53150:11: Bye Bye [preauth]
Sep 22 05:04:55 nativespace-cdp sshd[809925]: Disconnected from 116.204.180.162 port 53150 [preauth]
Sep 22 05:04:57 nativespace-cdp sudo[810005]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810012]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810016]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810021]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810024]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810028]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810031]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810034]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810037]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810040]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810043]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810046]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810049]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810052]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 22 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:57 nativespace-cdp sudo[810055]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:58 nativespace-cdp sudo[810058]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:58 nativespace-cdp sudo[810061]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:58 nativespace-cdp sudo[810064]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:58 nativespace-cdp sudo[810067]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:58 nativespace-cdp sudo[810070]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:58 nativespace-cdp sudo[810073]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:58 nativespace-cdp sudo[810077]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:58 nativespace-cdp sudo[810080]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:04:58 nativespace-cdp sudo[810083]: pam_unix(sudo:session): session closed for user root
Sep 22 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/legotest -type d -name wp-includes -printf '%h\0'
Sep 22 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810086]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legotest/wp-content
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810093]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legotest/wp-config.php
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810096]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legotest/.wp-toolkit-ignore
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810099]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/leicester -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810102]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-content
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810105]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-config.php
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810108]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/.wp-toolkit-ignore
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810111]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/leigh -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810114]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-content
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810117]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-config.php
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810120]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/.wp-toolkit-ignore
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810123]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/leyland -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810126]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-content
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810129]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-config.php
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810133]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/.wp-toolkit-ignore
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810136]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/lichfield -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810139]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-content
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810142]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-config.php
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810145]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/.wp-toolkit-ignore
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:00 nativespace-cdp sudo[810148]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lkpier/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810151]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lkpier/public_html/wp-content
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810238]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lkpier/public_html/wp-config.php
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810241]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lkpier/public_html/.wp-toolkit-ignore
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810245]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oubpgvbx/public_html/link -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810248]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/live -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810251]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-services.co.uk/live -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810254]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeinventories.co.uk/live -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810257]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810263]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810267]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810271]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:02 nativespace-cdp sudo[810275]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:04 nativespace-cdp sudo[810280]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-content
Sep 22 05:05:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:04 nativespace-cdp sudo[810296]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-config.php
Sep 22 05:05:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:04 nativespace-cdp sudo[810299]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/.wp-toolkit-ignore
Sep 22 05:05:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:04 nativespace-cdp sudo[810302]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:04 nativespace-cdp sudo[810305]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-content
Sep 22 05:05:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:04 nativespace-cdp sudo[810308]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-config.php
Sep 22 05:05:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:04 nativespace-cdp sudo[810311]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/.wp-toolkit-ignore
Sep 22 05:05:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:04 nativespace-cdp sudo[810314]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/loudounchurch.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:05 nativespace-cdp sudo[810317]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/loudounchurch.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:05 nativespace-cdp sudo[810325]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/loughborough -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:05 nativespace-cdp sudo[810330]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-content
Sep 22 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:05 nativespace-cdp sudo[810333]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-config.php
Sep 22 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:05 nativespace-cdp sudo[810336]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/.wp-toolkit-ignore
Sep 22 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:05 nativespace-cdp sudo[810339]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/legorobotclub/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:06 nativespace-cdp sudo[810342]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-content
Sep 22 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:06 nativespace-cdp sudo[810347]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-config.php
Sep 22 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810350]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/.wp-toolkit-ignore
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810353]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/macclesfield -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810356]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-content
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810360]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-config.php
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810363]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/.wp-toolkit-ignore
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810366]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/maflemin/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810369]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/magichat/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810372]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/manchester -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810375]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-content
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810378]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-config.php
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810381]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/.wp-toolkit-ignore
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810384]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/mansfield -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810387]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-content
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810390]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-config.php
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810393]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/.wp-toolkit-ignore
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810396]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/david/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810399]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/markward/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810403]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/martsblo/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:07 nativespace-cdp sudo[810407]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810410]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-content
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810415]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-config.php
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810418]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/.wp-toolkit-ignore
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810421]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/wp-content
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810424]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/wp-config.php
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810427]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/../wp-config.php
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810430]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/../wp-includes
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810433]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/wp-content
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810436]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/wp-config.php
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810439]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/../wp-config.php
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810442]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/../wp-includes
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810445]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/samco/wp-content
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810449]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/samco/wp-config.php
Sep 22 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:08 nativespace-cdp sudo[810452]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/samco/.wp-toolkit-ignore
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810455]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-content
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810458]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-config.php
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810461]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/.wp-toolkit-ignore
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810464]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/wp-content
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810467]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/wp-config.php
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810470]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/.wp-toolkit-ignore
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810473]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/mcleanforth.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810476]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/mcleanforth.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810479]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/media/mediapeople.tv -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810482]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/megacards/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810485]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/middleeast-training.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810488]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/middleeast-training.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810491]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/midlands -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810494]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-content
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810497]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-config.php
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810500]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/.wp-toolkit-ignore
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:09 nativespace-cdp sudo[810503]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:10 nativespace-cdp sudo[810506]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-content
Sep 22 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:10 nativespace-cdp sudo[810510]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-config.php
Sep 22 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:10 nativespace-cdp sudo[810513]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/.wp-toolkit-ignore
Sep 22 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:10 nativespace-cdp sudo[810516]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-content
Sep 22 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:10 nativespace-cdp sudo[810519]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-config.php
Sep 22 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:10 nativespace-cdp sudo[810522]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/.wp-toolkit-ignore
Sep 22 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:10 nativespace-cdp sudo[810525]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/missfoxglove.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:10 nativespace-cdp sudo[810528]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:10 nativespace-cdp sudo[810531]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810534]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/mod2 -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810544]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810550]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810553]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/mod2 -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810556]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/monmouthmt.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810560]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/monmouthmt.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810563]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/stagingerris/public_html/montel.stagingerris.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810566]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/moonmousecreative.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810569]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/moonmousecreative.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810573]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/moraycoastescapes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:13 nativespace-cdp sudo[810576]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/moraycoastescapes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:14 nativespace-cdp sudo[810579]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/MP40 -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:14 nativespace-cdp sudo[810582]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/muchbirchparish.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:14 nativespace-cdp sudo[810585]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/muchbirchparish.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:14 nativespace-cdp sudo[810589]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/musorguk/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:15 nativespace-cdp sudo[810592]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/musorguk/public_html/teapot/wp-content
Sep 22 05:05:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:15 nativespace-cdp sudo[810600]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/musorguk/public_html/teapot/wp-config.php
Sep 22 05:05:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:15 nativespace-cdp sudo[810603]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/musorguk/public_html/teapot/.wp-toolkit-ignore
Sep 22 05:05:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:15 nativespace-cdp sudo[810606]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/my -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:15 nativespace-cdp sudo[810609]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nativene/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:15 nativespace-cdp sudo[810612]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nstriton/public_html/nativespace-triton.ns-triton.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:15 nativespace-cdp sudo[810615]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:21 nativespace-cdp sudo[810618]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/ndpwesthampstead.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:21 nativespace-cdp sudo[810631]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/ndpwesthampstead.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:21 nativespace-cdp sudo[810634]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/newnhamstpetersschool.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:21 nativespace-cdp sudo[810637]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/newnhamstpetersschool.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:21 nativespace-cdp sudo[810640]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/newstoda/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:22 nativespace-cdp sudo[810643]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/newstoda/public_html/wp-content
Sep 22 05:05:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:22 nativespace-cdp sudo[810649]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/newstoda/public_html/wp-config.php
Sep 22 05:05:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:22 nativespace-cdp sudo[810652]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/newstoda/public_html/.wp-toolkit-ignore
Sep 22 05:05:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:22 nativespace-cdp sudo[810655]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ninejimm/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:23 nativespace-cdp sudo[810658]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ninejimm/public_html/wordpress/wp-content
Sep 22 05:05:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:23 nativespace-cdp sudo[810662]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ninejimm/public_html/wordpress/wp-config.php
Sep 22 05:05:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:23 nativespace-cdp sudo[810665]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ninejimm/public_html/wordpress/.wp-toolkit-ignore
Sep 22 05:05:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:23 nativespace-cdp sudo[810668]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nomistakes/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810671]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/northshoresoftware.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810679]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/northshoresoftware.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810682]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/northwest -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810685]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-content
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810688]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-config.php
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810691]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/.wp-toolkit-ignore
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810694]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/nottingham -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810697]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-content
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810700]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-config.php
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810703]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/.wp-toolkit-ignore
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810706]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nove/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810709]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nove/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810713]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nscdp/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:26 nativespace-cdp sudo[810716]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nsceres/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810719]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nstriton/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810722]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/nuedesign.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810726]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/nuedesign.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810729]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/nuneaton -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810732]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-content
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810735]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-config.php
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810738]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/.wp-toolkit-ignore
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810741]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/oddleberry.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810744]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-content
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810747]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-config.php
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810750]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/.wp-toolkit-ignore
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810753]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/oldham -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810756]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-content
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810759]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-config.php
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810762]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/.wp-toolkit-ignore
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810765]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810768]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810783]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810786]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810789]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810792]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810795]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:27 nativespace-cdp sudo[810798]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/onlycont/onlycontents.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:28 nativespace-cdp sudo[810801]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/onlycont/onlycontents.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:28 nativespace-cdp sudo[810804]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/outdoorc/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:28 nativespace-cdp sudo[810808]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/outdoorc/public_html/wp-content
Sep 22 05:05:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:28 nativespace-cdp sudo[810811]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/outdoorc/public_html/wp-config.php
Sep 22 05:05:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:28 nativespace-cdp sudo[810814]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/outdoorc/public_html/.wp-toolkit-ignore
Sep 22 05:05:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:28 nativespace-cdp sudo[810817]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/oxfraud -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:28 nativespace-cdp sudo[810820]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/oxfraud2 -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:28 nativespace-cdp sudo[810823]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/foods/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:29 nativespace-cdp sudo[810826]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/alexadmin/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:29 nativespace-cdp sudo[810832]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810835]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-content
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810868]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-config.php
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810871]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/.wp-toolkit-ignore
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810874]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/mausblack.co.uk/wp-content
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810877]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/mausblack.co.uk/wp-config.php
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810880]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/mausblack.co.uk/.wp-toolkit-ignore
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810885]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/pmc-working/wp-content
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810888]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/pmc-working/wp-config.php
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810892]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/pmc-working/.wp-toolkit-ignore
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810895]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/sibylnutmeg/wp-content
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810898]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/sibylnutmeg/wp-config.php
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810901]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/sibylnutmeg/.wp-toolkit-ignore
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810905]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/test_cushion/wp-content
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810908]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/test_cushion/wp-config.php
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810911]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/test_cushion/.wp-toolkit-ignore
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810914]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-content
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810917]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-config.php
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810920]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/.wp-toolkit-ignore
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810923]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/wp-content
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810926]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/wp-config.php
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810929]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/.wp-toolkit-ignore
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810932]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/rubbishchristmas/wp-content
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810935]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/rubbishchristmas/wp-config.php
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810938]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/rubbishchristmas/.wp-toolkit-ignore
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:40 nativespace-cdp sudo[810941]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/philmcph/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:41 nativespace-cdp sudo[810944]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/philmcph/public_html/wp-content
Sep 22 05:05:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:41 nativespace-cdp sudo[810950]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/philmcph/public_html/wp-config.php
Sep 22 05:05:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:41 nativespace-cdp sudo[810953]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/philmcph/public_html/.wp-toolkit-ignore
Sep 22 05:05:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:41 nativespace-cdp sudo[810956]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/photos.leadbetter.cc -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:41 nativespace-cdp sudo[810961]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/photos.leadbetter.cc -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:41 nativespace-cdp sudo[810964]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/php -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:41 nativespace-cdp sudo[810967]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[810970]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[810973]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[810977]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[810980]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[810983]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[810986]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[810989]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[810992]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[810998]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[811001]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[811004]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[811007]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[811010]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:42 nativespace-cdp sudo[811013]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811016]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811022]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811025]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811028]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811031]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811034]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811037]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-ne.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811040]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-services.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811043]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811046]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811050]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811053]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811056]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811059]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811062]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:43 nativespace-cdp sudo[811065]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811069]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811072]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811075]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811078]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811081]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811084]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811087]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-services.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811090]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.pro -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811093]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.pro -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811096]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.services -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811099]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811102]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811105]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811108]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.services -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811111]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811115]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811118]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811121]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/www.pinstripefranchise.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811124]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/www.pinstripefranchise.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:44 nativespace-cdp sudo[811127]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:45 nativespace-cdp sudo[811130]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:45 nativespace-cdp sudo[811133]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:45 nativespace-cdp sudo[811136]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:45 nativespace-cdp sudo[811139]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:45 nativespace-cdp sudo[811142]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:45 nativespace-cdp sudo[811145]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:45 nativespace-cdp sudo[811148]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:45 nativespace-cdp sudo[811151]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811154]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811158]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811161]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811164]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811167]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811170]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811173]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811176]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeoffice.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811179]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeoffice.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811182]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811185]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811188]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811191]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811194]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811197]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811200]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:46 nativespace-cdp sudo[811203]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811206]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811210]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811213]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811216]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811219]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811222]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811225]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811228]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811233]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811236]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811239]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:05:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:47 nativespace-cdp sudo[811242]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811245]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811248]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeutilities.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811251]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeutilities.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811255]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/fancydresspiratecostumes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811258]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-ne.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811261]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/portfolio -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811264]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/privatelandlordservices.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811268]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/privatelandlordservices.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811271]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811274]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/emma.care -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811278]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/emma.care -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811281]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ralphbarnes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811284]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ralphbarnes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811288]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/randomclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811291]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/randomclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811294]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811297]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811300]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/redcaffeine.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811303]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/redcaffeine.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811306]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/redziller.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811309]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/redziller.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811312]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/reliable/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:48 nativespace-cdp sudo[811316]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ptkxhsbt/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:50 nativespace-cdp sshd[811324]: Invalid user iptv from 82.196.9.140 port 58182
Sep 22 05:05:50 nativespace-cdp sshd[811324]: input_userauth_request: invalid user iptv [preauth]
Sep 22 05:05:50 nativespace-cdp sshd[811324]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 05:05:50 nativespace-cdp sshd[811324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.9.140
Sep 22 05:05:52 nativespace-cdp sudo[811319]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:52 nativespace-cdp sshd[811324]: Failed password for invalid user iptv from 82.196.9.140 port 58182 ssh2
Sep 22 05:05:52 nativespace-cdp sshd[811324]: Received disconnect from 82.196.9.140 port 58182:11: Bye Bye [preauth]
Sep 22 05:05:52 nativespace-cdp sshd[811324]: Disconnected from 82.196.9.140 port 58182 [preauth]
Sep 22 05:05:53 nativespace-cdp sudo[811332]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:53 nativespace-cdp sudo[811339]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.net -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:53 nativespace-cdp sudo[811342]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:53 nativespace-cdp sudo[811345]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.net -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:53 nativespace-cdp sudo[811348]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ultbcrra/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:53 nativespace-cdp sudo[811351]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ulsukarm/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:54 nativespace-cdp sudo[811355]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/public_html/wp-content
Sep 22 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:54 nativespace-cdp sudo[811403]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/rochdale -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:54 nativespace-cdp sudo[811406]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-content
Sep 22 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:54 nativespace-cdp sudo[811409]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-config.php
Sep 22 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:54 nativespace-cdp sudo[811413]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/.wp-toolkit-ignore
Sep 22 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:54 nativespace-cdp sudo[811416]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/romaldki/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:54 nativespace-cdp sudo[811419]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ulsukarm/rtadevelopment.robert-taylor.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811422]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/rtadevelopment.robert-taylor.co.uk/wp-content
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811426]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/rtadevelopment.robert-taylor.co.uk/wp-config.php
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811430]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/rtadevelopment.robert-taylor.co.uk/.wp-toolkit-ignore
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811433]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/rugby -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811436]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-content
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811439]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-config.php
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811442]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/.wp-toolkit-ignore
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811445]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/sale -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811448]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-content
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811451]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-config.php
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811457]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/.wp-toolkit-ignore
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811461]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/salford -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811464]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-content
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811468]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-config.php
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811473]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/.wp-toolkit-ignore
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811476]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html/sams -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811479]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-content
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811482]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-config.php
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811485]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/.wp-toolkit-ignore
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811488]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/branko/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:05:55 nativespace-cdp sudo[811491]: pam_unix(sudo:session): session closed for user root
Sep 22 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sarafoundation/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:00 nativespace-cdp sudo[811495]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/zebrapho/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:00 nativespace-cdp sudo[811514]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/savethealliance.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:00 nativespace-cdp sudo[811517]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/savethealliance.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:00 nativespace-cdp sudo[811520]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/schlossrothenburg.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:00 nativespace-cdp sudo[811524]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/schlossrothenburg.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:00 nativespace-cdp sudo[811527]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/smrszyqg/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:00 nativespace-cdp sudo[811530]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/severnvaledeanery.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:00 nativespace-cdp sudo[811533]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/severnvaledeanery.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811536]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/severnwyema.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811539]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/severnwyema.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811542]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/shiningpyramid.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811545]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/shiningpyramid.org -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811548]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811551]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/sibtoncc -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811555]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/sibtoncc -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811558]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/sinclairmanagement -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811561]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/sindencox-art.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811564]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/sindencox-art.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:01 nativespace-cdp sudo[811590]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sketchy/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811593]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811596]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/skyfire-designs.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811609]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/skyfire-designs.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811613]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/smitrod.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811616]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/smitrod.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811619]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/solihull -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811622]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-content
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811625]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-config.php
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811628]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/.wp-toolkit-ignore
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811632]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ptkxhsbt/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:02 nativespace-cdp sudo[811635]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hodgesonweb/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:03 nativespace-cdp sudo[811638]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html/sams/wp -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:03 nativespace-cdp sudo[811641]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-content
Sep 22 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:03 nativespace-cdp sudo[811644]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-config.php
Sep 22 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:03 nativespace-cdp sudo[811647]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/.wp-toolkit-ignore
Sep 22 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:03 nativespace-cdp sudo[811650]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sosevalu/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:03 nativespace-cdp sudo[811653]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/southlon/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:03 nativespace-cdp sudo[811656]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/southwestbrassbandassociation.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:03 nativespace-cdp sudo[811659]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/southwestbrassbandassociation.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:03 nativespace-cdp sudo[811663]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/spectrum/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811666]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/spectrum/public_html/blog/wp-content
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811671]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/spectrum/public_html/blog/wp-config.php
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811674]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/spectrum/public_html/blog/.wp-toolkit-ignore
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811677]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/stafford -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811681]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-content
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811684]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-config.php
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811687]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/.wp-toolkit-ignore
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811690]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/legorobotclub/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811693]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-content
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811696]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-config.php
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811699]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/.wp-toolkit-ignore
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:04 nativespace-cdp sudo[811702]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/stagingerris/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811705]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/starwigs_2.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811718]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/starwigs_2.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811721]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/careers/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811724]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bakery/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811728]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/steakbridieme/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811731]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lucy/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811734]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/steve/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811737]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/steve/public_html/wp-content
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811740]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/steve/public_html/wp-config.php
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811743]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/steve/public_html/.wp-toolkit-ignore
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:09 nativespace-cdp sudo[811746]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/foundation/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811749]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/foundation/public_html/wp-content
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811768]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/foundation/public_html/wp-config.php
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811771]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/foundation/public_html/.wp-toolkit-ignore
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811774]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hubmaster/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811777]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811780]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stmichaelmitcheldean.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811783]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stmichaelmitcheldean.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811787]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/stockport -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811790]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-content
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811793]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-config.php
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811796]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/.wp-toolkit-ignore
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811799]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/stoke -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811803]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-content
Sep 22 05:06:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:16 nativespace-cdp sudo[811806]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-config.php
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:17 nativespace-cdp sudo[811809]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/.wp-toolkit-ignore
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:17 nativespace-cdp sudo[811812]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/store -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:17 nativespace-cdp sudo[811815]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:17 nativespace-cdp sudo[811818]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/strathard.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:17 nativespace-cdp sudo[811821]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/strathard.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:17 nativespace-cdp sudo[811824]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stroud-deanery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:17 nativespace-cdp sudo[811827]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stroud-deanery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:17 nativespace-cdp sudo[811830]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/stuartge/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:17 nativespace-cdp sudo[811833]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/sturgessbarns/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:19 nativespace-cdp sudo[811836]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/sturgessbarns/public_html/wp-content
Sep 22 05:06:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:19 nativespace-cdp sudo[811847]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/sturgessbarns/public_html/wp-config.php
Sep 22 05:06:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:19 nativespace-cdp sudo[811850]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/sturgessbarns/public_html/.wp-toolkit-ignore
Sep 22 05:06:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:19 nativespace-cdp sudo[811853]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/sturgessbarns.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811856]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-content
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811865]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-config.php
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811868]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/.wp-toolkit-ignore
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811871]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/sturgessbarns.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811874]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-content
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811877]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-config.php
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811880]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/.wp-toolkit-ignore
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811883]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/superbstuff.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811886]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/superbstuff.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811889]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/havantho/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811892]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/suttoncoldfield -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811895]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-content
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811898]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-config.php
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811901]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/.wp-toolkit-ignore
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811904]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/swbba.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811907]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/swbba.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811910]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/tamworth -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811913]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-content
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811917]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-config.php
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811920]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/.wp-toolkit-ignore
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811923]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/tdcc-online.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811926]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/tdcc-online.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811929]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/tenancy-deposit-scheme-scotland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:22 nativespace-cdp sudo[811933]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811936]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811939]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811942]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811945]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811948]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811951]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811954]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/telford -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811957]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-content
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811960]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-config.php
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811963]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/.wp-toolkit-ignore
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811966]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/temperaturemonitor.info -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811969]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/temperaturemonitor.info -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811972]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/tenancy-deposit-scheme-scotland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811975]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/ranxtertest -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811978]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/seftvta/public_html/test -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811981]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oubpgvbx/public_html/testlink -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811984]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/atestord/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811988]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/theblack/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811991]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/thedogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811994]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/thedogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[811997]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/Thegooddogshop.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[812000]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/Thegooddogshop.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[812003]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/thegooddogshop.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[812006]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/thegooddogshop.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[812009]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hidden/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[812012]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/hidden/public_html/wp-content
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[812015]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/hidden/public_html/wp-config.php
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[812019]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/hidden/public_html/../wp-config.php
Sep 22 05:06:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:23 nativespace-cdp sudo[812022]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/seftvta/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812025]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/leftie/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812028]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/leftie/public_html/wp-content
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812031]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/leftie/public_html/wp-config.php
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812034]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/leftie/public_html/../wp-config.php
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812037]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/thelordslarder.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812040]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/thelordslarder.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812043]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/thenorthseashore.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812046]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/thenorthseashore.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812049]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/thesevernforum.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812052]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/thesevernforum.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812055]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/still/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812058]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/tigerestates.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812061]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812064]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/public_html/tigermanagement.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812067]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/public_html/tigermetre.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812071]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tomandle/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812074]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchinventories.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812077]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchinventories.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812080]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchis.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812083]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchis.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812086]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/traddad -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812089]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812092]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812095]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812098]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/traddad -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812101]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812104]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812107]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812110]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/trafford -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:24 nativespace-cdp sudo[812113]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-content
Sep 22 05:06:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812116]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-config.php
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812119]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/.wp-toolkit-ignore
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812122]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/training-middleeast.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812125]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/training-middleeast.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812128]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/traversingthehinterland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812131]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-content
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812134]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-config.php
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812137]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/.wp-toolkit-ignore
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812140]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/traversingthehinterland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812143]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-content
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812146]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-config.php
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812149]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/.wp-toolkit-ignore
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:25 nativespace-cdp sudo[812152]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/trendytiles.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:30 nativespace-cdp sudo[812156]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-content
Sep 22 05:06:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:30 nativespace-cdp sudo[812177]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-config.php
Sep 22 05:06:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:30 nativespace-cdp sudo[812180]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/.wp-toolkit-ignore
Sep 22 05:06:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:30 nativespace-cdp sudo[812183]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/trendytiles.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:30 nativespace-cdp sudo[812186]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-content
Sep 22 05:06:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:30 nativespace-cdp sudo[812189]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-config.php
Sep 22 05:06:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:30 nativespace-cdp sudo[812192]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/.wp-toolkit-ignore
Sep 22 05:06:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:30 nativespace-cdp sudo[812195]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/trixietrapp -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:30 nativespace-cdp sshd[812200]: Invalid user ionadmin from 82.196.9.140 port 47092
Sep 22 05:06:30 nativespace-cdp sshd[812200]: input_userauth_request: invalid user ionadmin [preauth]
Sep 22 05:06:30 nativespace-cdp sshd[812200]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 05:06:30 nativespace-cdp sshd[812200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.9.140
Sep 22 05:06:31 nativespace-cdp sudo[812198]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/trixietrapp/wp-content
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812204]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/trixietrapp/wp-config.php
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812207]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/trixietrapp/.wp-toolkit-ignore
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812210]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/ukdrivingroads.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812213]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/ukdrivingroads.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812216]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/ranxter-upload -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812219]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/users -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812222]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vantagep/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812225]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812228]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/walkden -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812231]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-content
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812234]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-config.php
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812237]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/.wp-toolkit-ignore
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:31 nativespace-cdp sudo[812240]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/crrtipdl/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:32 nativespace-cdp sudo[812243]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/crrtipdl/public_html/wp-content
Sep 22 05:06:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:32 nativespace-cdp sudo[812252]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/crrtipdl/public_html/wp-config.php
Sep 22 05:06:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:32 nativespace-cdp sudo[812255]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/crrtipdl/public_html/.wp-toolkit-ignore
Sep 22 05:06:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:32 nativespace-cdp sudo[812258]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/walsall -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:32 nativespace-cdp sudo[812261]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-content
Sep 22 05:06:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:32 nativespace-cdp sudo[812264]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-config.php
Sep 22 05:06:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:32 nativespace-cdp sudo[812267]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/.wp-toolkit-ignore
Sep 22 05:06:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:32 nativespace-cdp sudo[812271]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/warrington -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:33 nativespace-cdp sshd[812200]: Failed password for invalid user ionadmin from 82.196.9.140 port 47092 ssh2
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812274]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sshd[812200]: Received disconnect from 82.196.9.140 port 47092:11: Bye Bye [preauth]
Sep 22 05:06:33 nativespace-cdp sshd[812200]: Disconnected from 82.196.9.140 port 47092 [preauth]
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-content
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812277]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-config.php
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812284]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/.wp-toolkit-ignore
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812287]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/carsinyo/public_html/wavs.co -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812290]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-content
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812293]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-config.php
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812297]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/.wp-toolkit-ignore
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812300]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/webba.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812303]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/webba.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sudo[812306]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:33 nativespace-cdp sshd[812314]: Connection closed by 159.100.136.21 port 33022 [preauth]
Sep 22 05:06:34 nativespace-cdp sudo[812309]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lbhyisi/public_html/redziller.co.uk 2fe6b75f-1b22-45ab-928d-6683b177d2fe55/blog/wp-content
Sep 22 05:06:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:34 nativespace-cdp sudo[812330]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lbhyisi/public_html/redziller.co.uk 2fe6b75f-1b22-45ab-928d-6683b177d2fe55/blog/wp-config.php
Sep 22 05:06:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:34 nativespace-cdp sudo[812333]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lbhyisi/public_html/redziller.co.uk 2fe6b75f-1b22-45ab-928d-6683b177d2fe55/blog/.wp-toolkit-ignore
Sep 22 05:06:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:34 nativespace-cdp sudo[812336]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/werefoxproductions.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812339]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-content
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812346]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-config.php
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812349]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/.wp-toolkit-ignore
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812353]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/werefoxproductions.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812356]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-content
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812360]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-config.php
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812363]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/.wp-toolkit-ignore
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812367]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/what/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812370]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/widnes -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812373]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-content
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812376]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-config.php
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812379]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/.wp-toolkit-ignore
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812382]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/wigan -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812385]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-content
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812388]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-config.php
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812392]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/.wp-toolkit-ignore
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812397]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/wilsonleo.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812400]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/wilsonleo.com -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812403]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812407]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:35 nativespace-cdp sudo[812410]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/outdoorc/public_html/windkatcowls.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812413]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/windwhistlewarren.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812416]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/windwhistlewarren.org.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812419]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/winsfordhouseproduce.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812423]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/winsfordhouseproduce.co.uk -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812426]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/wolverhampton -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812429]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-content
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812432]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-config.php
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812435]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/.wp-toolkit-ignore
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812438]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/worcester -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812441]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-content
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812444]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-config.php
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812447]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/.wp-toolkit-ignore
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812450]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/zebrapho/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812453]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/zebrapho/public_html -type d -name wp-includes -printf '%h\0'
Sep 22 05:06:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:06:36 nativespace-cdp sudo[812456]: pam_unix(sudo:session): session closed for user root
Sep 22 05:06:49 nativespace-cdp sshd[812495]: Invalid user ionadmin from 116.204.180.162 port 53134
Sep 22 05:06:49 nativespace-cdp sshd[812495]: input_userauth_request: invalid user ionadmin [preauth]
Sep 22 05:06:49 nativespace-cdp sshd[812495]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 05:06:49 nativespace-cdp sshd[812495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.204.180.162
Sep 22 05:06:51 nativespace-cdp sshd[812495]: Failed password for invalid user ionadmin from 116.204.180.162 port 53134 ssh2
Sep 22 05:06:51 nativespace-cdp sshd[812495]: Received disconnect from 116.204.180.162 port 53134:11: Bye Bye [preauth]
Sep 22 05:06:51 nativespace-cdp sshd[812495]: Disconnected from 116.204.180.162 port 53134 [preauth]
Sep 22 05:07:39 nativespace-cdp sshd[812706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.204.180.162  user=root
Sep 22 05:07:39 nativespace-cdp sshd[812706]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 05:07:41 nativespace-cdp sshd[812706]: Failed password for root from 116.204.180.162 port 38946 ssh2
Sep 22 05:07:43 nativespace-cdp sshd[812706]: Received disconnect from 116.204.180.162 port 38946:11: Bye Bye [preauth]
Sep 22 05:07:43 nativespace-cdp sshd[812706]: Disconnected from 116.204.180.162 port 38946 [preauth]
Sep 22 05:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 05:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:26 nativespace-cdp sudo[813007]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 05:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:26 nativespace-cdp sudo[813010]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 05:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:27 nativespace-cdp sudo[813014]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 05:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:27 nativespace-cdp sudo[813018]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 05:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:29 nativespace-cdp sudo[813021]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:29 nativespace-cdp sudo[813041]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:29 nativespace-cdp sudo[813046]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:29 nativespace-cdp sudo[813049]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:29 nativespace-cdp sudo[813052]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:29 nativespace-cdp sudo[813055]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:29 nativespace-cdp sudo[813058]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 05:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:36 nativespace-cdp sudo[813074]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 05:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:36 nativespace-cdp sudo[813078]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=asandcoc user-2=sibtoncc user-3=steve user-4=zebrapho user-5=bwppodcast user-6=nsceres user-7=burydropin user-8=fawcettd user-9=dhyana user-10=eatspam user-11=darkstar user-12=beauty user-13=ctedorgu user-14=philmcph user-15=steakbridieme user-16=firstre5 user-17=donnychicago user-18=lkpier user-19=fortunaz user-20=health2045 user-21=foods user-22=leftie user-23=nscdp user-24=tigerlet user-25=barbersh user-26=hidden user-27=nomistakes user-28=smrszyqg user-29=isleofwi user-30=paulmca1 user-31=howardon user-32=pugwash user-33=cwsocial user-34=ninejimm user-35=reliable user-36=cathski user-37=cambria1 user-38=courseme user-39=eugincou user-40=hirefootballgame user-41=jennimil user-42=tomandle user-43=nbhavers user-44=careers user-45=david user-46=mcdermos user-47=chrisdal user-48=onlycont
Sep 22 05:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=attlebor user-50=lucy user-51=romaldki user-52=branko user-53=ranxterc user-54=hodgsonmail user-55=outdoorc user-56=boldover user-57=nove user-58=sosevalu user-59=crrtipdl user-60=bakery user-61=nvihkvu user-62=sketchy user-63=cath user-64=havantho user-65=what user-66=tstardom user-67=oubpgvbx user-68=design user-69=kategilpin user-70=ladburyp user-71=stagingerris user-72=dancinggardener user-73=maflemin user-74=lbscrmod user-75=connect9 user-76=athenare user-77=vantagep user-78=booff user-79=markward user-80=foundation user-81=ulsukarm user-82=theblack user-83=hodgesonweb user-84=spectrum user-85=jarvisin user-86=leereyn1 user-87=stephani user-88=still user-89=agproduc user-90=sarafoundation user-91=atestord user-92=strathar user-93=brmrjxl user-94=lakesan1 user-95=musorguk user-96=megacards user-97=wilsonsw user-98=ptkxhsbt user-99=dickemery123 user-100=martsblo user-101=magichat user-102=lbhyisi
Sep 22 05:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=hhdugcor user-104=coursemc user-105=opaiscyx user-106=firstres user-107=jonhartl user-108=seftvta user-109=ultbcrra user-110=southlon user-111=highlegh user-112=firstred user-113=costestimatorco user-114=firstrel user-115=clarkass user-116=carsinyo user-117=fetch user-118=hubmaster user-119=elecleis user-120=milloyco user-121=gilpin user-122=thqkgnbz user-123=connectedshoppin user-124=ianrayne user-125=accooper user-126=battlere user-127=oneoarco user-128=firstre2 user-129=vivienn1 user-130=brighto1 user-131=nstriton user-132=bemadonn user-133=belle user-134=ggaaorgu user-135=newstoda user-136=bedfords user-137=skyfirec user-138=alexadmin user-139=nativene user-140=stuartge user-141=askhform user-142=innovat1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 05:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 05:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:36 nativespace-cdp sudo[813083]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:37 nativespace-cdp sudo[813091]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7f7R8apQdNcbbreM.~
Sep 22 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:37 nativespace-cdp sudo[813094]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7f7R8apQdNcbbreM.~'
Sep 22 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:37 nativespace-cdp sudo[813098]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7f7R8apQdNcbbreM.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:37 nativespace-cdp sudo[813102]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:37 nativespace-cdp sudo[813105]: pam_unix(sudo:session): session closed for user root
Sep 22 05:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 05:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 05:09:38 nativespace-cdp sudo[813125]: pam_unix(sudo:session): session closed for user root
Sep 22 05:11:33 nativespace-cdp sshd[813602]: Connection closed by 159.100.136.21 port 41890 [preauth]
Sep 22 05:16:36 nativespace-cdp sshd[814880]: Connection closed by 159.100.136.21 port 50868 [preauth]
Sep 22 05:21:33 nativespace-cdp sshd[815938]: Connection closed by 159.100.136.21 port 60146 [preauth]
Sep 22 05:26:33 nativespace-cdp sshd[816938]: Connection closed by 159.100.136.21 port 41050 [preauth]
Sep 22 05:31:33 nativespace-cdp sshd[818039]: Connection closed by 159.100.136.21 port 50124 [preauth]
Sep 22 05:35:09 nativespace-cdp su: pam_unix(su:session): session opened for user what by (uid=0)
Sep 22 05:35:10 nativespace-cdp su[818866]: pam_unix(su:session): session closed for user what
Sep 22 05:36:33 nativespace-cdp sshd[819298]: Connection closed by 159.100.136.21 port 59850 [preauth]
Sep 22 05:41:35 nativespace-cdp sshd[820395]: Connection closed by 159.100.136.21 port 40674 [preauth]
Sep 22 05:46:33 nativespace-cdp sshd[821668]: Connection closed by 159.100.136.21 port 50258 [preauth]
Sep 22 05:51:34 nativespace-cdp sshd[822852]: Connection closed by 159.100.136.21 port 59754 [preauth]
Sep 22 05:56:33 nativespace-cdp sshd[824010]: Connection closed by 159.100.136.21 port 40916 [preauth]
Sep 22 06:01:35 nativespace-cdp sshd[825250]: Connection closed by 159.100.136.21 port 50380 [preauth]
Sep 22 06:06:33 nativespace-cdp sshd[826541]: Connection closed by 159.100.136.21 port 59636 [preauth]
Sep 22 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:25 nativespace-cdp sudo[827091]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:25 nativespace-cdp sudo[827095]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:26 nativespace-cdp sudo[827101]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 06:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:26 nativespace-cdp sudo[827110]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 06:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:29 nativespace-cdp sudo[827116]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 06:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:29 nativespace-cdp sudo[827131]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 06:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:29 nativespace-cdp sudo[827136]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 06:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:29 nativespace-cdp sudo[827140]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 06:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:29 nativespace-cdp sudo[827145]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 06:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:29 nativespace-cdp sudo[827151]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 06:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:29 nativespace-cdp sudo[827157]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 06:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:31 nativespace-cdp sudo[827169]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 06:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:31 nativespace-cdp sudo[827176]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=booff user-2=foundation user-3=markward user-4=lbscrmod user-5=maflemin user-6=vantagep user-7=connect9 user-8=athenare user-9=ulsukarm user-10=jarvisin user-11=hodgesonweb user-12=theblack user-13=spectrum user-14=agproduc user-15=still user-16=leereyn1 user-17=stephani user-18=brmrjxl user-19=lakesan1 user-20=atestord user-21=sarafoundation user-22=strathar user-23=wilsonsw user-24=megacards user-25=musorguk user-26=martsblo user-27=ptkxhsbt user-28=dickemery123 user-29=hhdugcor user-30=lbhyisi user-31=magichat user-32=firstres user-33=ultbcrra user-34=jonhartl user-35=seftvta user-36=coursemc user-37=opaiscyx user-38=costestimatorco user-39=clarkass user-40=firstrel user-41=highlegh user-42=southlon user-43=firstred user-44=elecleis user-45=gilpin user-46=milloyco user-47=fetch
Sep 22 06:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=carsinyo user-49=hubmaster user-50=ianrayne user-51=accooper user-52=thqkgnbz user-53=connectedshoppin user-54=nstriton user-55=brighto1 user-56=oneoarco user-57=battlere user-58=vivienn1 user-59=firstre2 user-60=bedfords user-61=bemadonn user-62=newstoda user-63=ggaaorgu user-64=belle user-65=skyfirec user-66=alexadmin user-67=askhform user-68=stuartge user-69=innovat1 user-70=nativene user-71=asandcoc user-72=sibtoncc user-73=zebrapho user-74=bwppodcast user-75=steve user-76=fawcettd user-77=burydropin user-78=nsceres user-79=darkstar user-80=eatspam user-81=beauty user-82=dhyana user-83=leftie user-84=foods user-85=fortunaz user-86=health2045 user-87=nscdp user-88=donnychicago user-89=firstre5 user-90=steakbridieme user-91=ctedorgu user-92=philmcph user-93=lkpier user-94=isleofwi user-95=smrszyqg user-96=tigerlet user-97=barbersh user-98=nomistakes user-99=hidden user-100=reliable user-101=ninejimm
Sep 22 06:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=cambria1 user-103=cathski user-104=cwsocial user-105=howardon user-106=pugwash user-107=paulmca1 user-108=hirefootballgame user-109=courseme user-110=eugincou user-111=tomandle user-112=jennimil user-113=mcdermos user-114=chrisdal user-115=david user-116=nbhavers user-117=careers user-118=lucy user-119=attlebor user-120=onlycont user-121=branko user-122=ranxterc user-123=hodgsonmail user-124=outdoorc user-125=romaldki user-126=nove user-127=boldover user-128=crrtipdl user-129=sosevalu user-130=bakery user-131=what user-132=oubpgvbx user-133=tstardom user-134=nvihkvu user-135=havantho user-136=sketchy user-137=cath user-138=kategilpin user-139=stagingerris user-140=dancinggardener user-141=ladburyp user-142=design feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 06:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 06:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:32 nativespace-cdp sudo[827190]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 06:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:32 nativespace-cdp sudo[827199]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wma3YKFtCYO6qDwh.~
Sep 22 06:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:32 nativespace-cdp sudo[827204]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wma3YKFtCYO6qDwh.~'
Sep 22 06:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:32 nativespace-cdp sudo[827208]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wma3YKFtCYO6qDwh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 06:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:32 nativespace-cdp sudo[827213]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 06:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:32 nativespace-cdp sudo[827219]: pam_unix(sudo:session): session closed for user root
Sep 22 06:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 06:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 06:09:33 nativespace-cdp sudo[827241]: pam_unix(sudo:session): session closed for user root
Sep 22 06:11:33 nativespace-cdp sshd[827732]: Connection closed by 159.100.136.21 port 39998 [preauth]
Sep 22 06:16:34 nativespace-cdp sshd[829070]: Connection closed by 159.100.136.21 port 49436 [preauth]
Sep 22 06:21:33 nativespace-cdp sshd[830268]: Connection closed by 159.100.136.21 port 58714 [preauth]
Sep 22 06:26:33 nativespace-cdp sshd[831411]: Connection closed by 159.100.136.21 port 39878 [preauth]
Sep 22 06:31:33 nativespace-cdp sshd[832775]: Connection closed by 159.100.136.21 port 49356 [preauth]
Sep 22 06:36:33 nativespace-cdp sshd[833777]: Connection closed by 159.100.136.21 port 59400 [preauth]
Sep 22 06:41:35 nativespace-cdp sshd[834825]: Connection closed by 159.100.136.21 port 39740 [preauth]
Sep 22 06:46:33 nativespace-cdp sshd[836152]: Connection closed by 159.100.136.21 port 49460 [preauth]
Sep 22 06:51:33 nativespace-cdp sshd[837259]: Connection closed by 159.100.136.21 port 58720 [preauth]
Sep 22 06:56:33 nativespace-cdp sshd[838360]: Connection closed by 159.100.136.21 port 39380 [preauth]
Sep 22 07:01:33 nativespace-cdp sshd[839766]: Connection closed by 159.100.136.21 port 48846 [preauth]
Sep 22 07:06:34 nativespace-cdp sshd[840862]: Connection closed by 159.100.136.21 port 57658 [preauth]
Sep 22 07:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 07:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:26 nativespace-cdp sudo[841429]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 07:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:26 nativespace-cdp sudo[841434]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 07:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:27 nativespace-cdp sudo[841439]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 07:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:27 nativespace-cdp sudo[841446]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 07:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:30 nativespace-cdp sudo[841452]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 07:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:30 nativespace-cdp sudo[841466]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 07:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:30 nativespace-cdp sudo[841471]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 07:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:30 nativespace-cdp sudo[841475]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 07:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:30 nativespace-cdp sudo[841480]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 07:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:30 nativespace-cdp sudo[841485]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 07:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:30 nativespace-cdp sudo[841491]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 07:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:32 nativespace-cdp sudo[841504]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 07:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:32 nativespace-cdp sudo[841511]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=oubpgvbx user-2=tstardom user-3=what user-4=cath user-5=sketchy user-6=havantho user-7=nvihkvu user-8=ladburyp user-9=stagingerris user-10=dancinggardener user-11=kategilpin user-12=design user-13=nove user-14=boldover user-15=bakery user-16=sosevalu user-17=crrtipdl user-18=attlebor user-19=lucy user-20=onlycont user-21=ranxterc user-22=hodgsonmail user-23=outdoorc user-24=branko user-25=romaldki user-26=tomandle user-27=jennimil user-28=chrisdal user-29=mcdermos user-30=careers user-31=nbhavers user-32=david user-33=cambria1 user-34=cathski user-35=ninejimm user-36=reliable user-37=howardon user-38=paulmca1 user-39=pugwash user-40=cwsocial user-41=hirefootballgame user-42=eugincou user-43=courseme user-44=nscdp user-45=health2045 user-46=fortunaz user-47=foods user-48=leftie user-49=lkpier
Sep 22 07:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=philmcph user-51=ctedorgu user-52=firstre5 user-53=steakbridieme user-54=donnychicago user-55=smrszyqg user-56=isleofwi user-57=hidden user-58=nomistakes user-59=tigerlet user-60=barbersh user-61=burydropin user-62=fawcettd user-63=nsceres user-64=beauty user-65=eatspam user-66=darkstar user-67=dhyana user-68=asandcoc user-69=sibtoncc user-70=bwppodcast user-71=zebrapho user-72=steve user-73=alexadmin user-74=skyfirec user-75=innovat1 user-76=stuartge user-77=askhform user-78=nativene user-79=brighto1 user-80=nstriton user-81=firstre2 user-82=vivienn1 user-83=battlere user-84=oneoarco user-85=bedfords user-86=belle user-87=ggaaorgu user-88=newstoda user-89=bemadonn user-90=milloyco user-91=gilpin user-92=elecleis user-93=hubmaster user-94=carsinyo user-95=fetch user-96=accooper user-97=ianrayne user-98=connectedshoppin user-99=thqkgnbz user-100=seftvta user-101=jonhartl user-102=ultbcrra user-103=firstres
Sep 22 07:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=coursemc user-105=opaiscyx user-106=firstrel user-107=clarkass user-108=costestimatorco user-109=firstred user-110=southlon user-111=highlegh user-112=martsblo user-113=dickemery123 user-114=ptkxhsbt user-115=lbhyisi user-116=hhdugcor user-117=magichat user-118=lakesan1 user-119=brmrjxl user-120=strathar user-121=sarafoundation user-122=atestord user-123=wilsonsw user-124=musorguk user-125=megacards user-126=jarvisin user-127=spectrum user-128=hodgesonweb user-129=theblack user-130=still user-131=agproduc user-132=stephani user-133=leereyn1 user-134=booff user-135=markward user-136=foundation user-137=athenare user-138=connect9 user-139=vantagep user-140=maflemin user-141=lbscrmod user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 07:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 07:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:33 nativespace-cdp sudo[841519]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 07:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:33 nativespace-cdp sudo[841526]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mWO6xDXalvyHXg9r.~
Sep 22 07:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:33 nativespace-cdp sudo[841531]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mWO6xDXalvyHXg9r.~'
Sep 22 07:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:33 nativespace-cdp sudo[841535]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mWO6xDXalvyHXg9r.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 07:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:33 nativespace-cdp sudo[841541]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 07:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:33 nativespace-cdp sudo[841547]: pam_unix(sudo:session): session closed for user root
Sep 22 07:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 07:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 07:09:35 nativespace-cdp sudo[841574]: pam_unix(sudo:session): session closed for user root
Sep 22 07:11:33 nativespace-cdp sshd[842095]: Connection closed by 159.100.136.21 port 38304 [preauth]
Sep 22 07:16:33 nativespace-cdp sshd[843489]: Connection closed by 159.100.136.21 port 47666 [preauth]
Sep 22 07:21:33 nativespace-cdp sshd[844627]: Connection closed by 159.100.136.21 port 56664 [preauth]
Sep 22 07:26:34 nativespace-cdp sshd[845638]: Connection closed by 159.100.136.21 port 37692 [preauth]
Sep 22 07:31:33 nativespace-cdp sshd[847001]: Connection closed by 159.100.136.21 port 46672 [preauth]
Sep 22 07:36:35 nativespace-cdp sshd[848111]: Connection closed by 159.100.136.21 port 56218 [preauth]
Sep 22 07:38:51 nativespace-cdp sshd[848589]: Invalid user ionadmin from 103.26.136.33 port 57856
Sep 22 07:38:51 nativespace-cdp sshd[848589]: input_userauth_request: invalid user ionadmin [preauth]
Sep 22 07:38:51 nativespace-cdp sshd[848589]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 07:38:51 nativespace-cdp sshd[848589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.136.33
Sep 22 07:38:53 nativespace-cdp sshd[848589]: Failed password for invalid user ionadmin from 103.26.136.33 port 57856 ssh2
Sep 22 07:38:57 nativespace-cdp sshd[848589]: Received disconnect from 103.26.136.33 port 57856:11: Bye Bye [preauth]
Sep 22 07:38:57 nativespace-cdp sshd[848589]: Disconnected from 103.26.136.33 port 57856 [preauth]
Sep 22 07:41:33 nativespace-cdp sshd[849172]: Connection closed by 159.100.136.21 port 35556 [preauth]
Sep 22 07:42:57 nativespace-cdp sshd[849389]: Invalid user koha from 103.26.136.33 port 46624
Sep 22 07:42:57 nativespace-cdp sshd[849389]: input_userauth_request: invalid user koha [preauth]
Sep 22 07:42:57 nativespace-cdp sshd[849389]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 07:42:57 nativespace-cdp sshd[849389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.136.33
Sep 22 07:42:59 nativespace-cdp sshd[849389]: Failed password for invalid user koha from 103.26.136.33 port 46624 ssh2
Sep 22 07:42:59 nativespace-cdp sshd[849389]: Received disconnect from 103.26.136.33 port 46624:11: Bye Bye [preauth]
Sep 22 07:42:59 nativespace-cdp sshd[849389]: Disconnected from 103.26.136.33 port 46624 [preauth]
Sep 22 07:44:17 nativespace-cdp sshd[849663]: Connection closed by 103.26.136.33 port 54032 [preauth]
Sep 22 07:44:56 nativespace-cdp sshd[849809]: Invalid user elemental from 103.26.136.33 port 33207
Sep 22 07:44:56 nativespace-cdp sshd[849809]: input_userauth_request: invalid user elemental [preauth]
Sep 22 07:44:56 nativespace-cdp sshd[849809]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 07:44:56 nativespace-cdp sshd[849809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.136.33
Sep 22 07:44:58 nativespace-cdp sshd[849809]: Failed password for invalid user elemental from 103.26.136.33 port 33207 ssh2
Sep 22 07:46:33 nativespace-cdp sshd[850477]: Connection closed by 159.100.136.21 port 44962 [preauth]
Sep 22 07:51:33 nativespace-cdp sshd[851569]: Connection closed by 159.100.136.21 port 53862 [preauth]
Sep 22 07:56:33 nativespace-cdp sshd[852643]: Connection closed by 159.100.136.21 port 35508 [preauth]
Sep 22 08:01:33 nativespace-cdp sshd[854034]: Connection closed by 159.100.136.21 port 44422 [preauth]
Sep 22 08:06:35 nativespace-cdp sshd[855263]: Connection closed by 159.100.136.21 port 53954 [preauth]
Sep 22 08:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 08:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:35 nativespace-cdp sudo[856030]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 08:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:35 nativespace-cdp sudo[856034]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 08:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:37 nativespace-cdp sudo[856040]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:37 nativespace-cdp sudo[856051]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:39 nativespace-cdp sudo[856059]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:39 nativespace-cdp sudo[856079]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:39 nativespace-cdp sudo[856084]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:39 nativespace-cdp sudo[856088]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:39 nativespace-cdp sudo[856093]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:39 nativespace-cdp sudo[856099]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:39 nativespace-cdp sudo[856104]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 08:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:41 nativespace-cdp sudo[856127]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 08:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:42 nativespace-cdp sudo[856134]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=brmrjxl user-2=lakesan1 user-3=sarafoundation user-4=atestord user-5=strathar user-6=wilsonsw user-7=musorguk user-8=megacards user-9=martsblo user-10=ptkxhsbt user-11=dickemery123 user-12=lbhyisi user-13=hhdugcor user-14=magichat user-15=markward user-16=booff user-17=foundation user-18=maflemin user-19=lbscrmod user-20=connect9 user-21=athenare user-22=vantagep user-23=ulsukarm user-24=jarvisin user-25=hodgesonweb user-26=theblack user-27=spectrum user-28=still user-29=agproduc user-30=leereyn1 user-31=stephani user-32=brighto1 user-33=nstriton user-34=battlere user-35=oneoarco user-36=firstre2 user-37=vivienn1 user-38=bedfords user-39=bemadonn user-40=ggaaorgu user-41=belle user-42=newstoda user-43=alexadmin user-44=skyfirec user-45=askhform user-46=stuartge user-47=innovat1 user-48=nativene
Sep 22 08:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstres user-50=seftvta user-51=jonhartl user-52=ultbcrra user-53=opaiscyx user-54=coursemc user-55=costestimatorco user-56=clarkass user-57=firstrel user-58=southlon user-59=highlegh user-60=firstred user-61=elecleis user-62=gilpin user-63=milloyco user-64=carsinyo user-65=fetch user-66=hubmaster user-67=ianrayne user-68=accooper user-69=thqkgnbz user-70=connectedshoppin user-71=health2045 user-72=fortunaz user-73=leftie user-74=foods user-75=nscdp user-76=ctedorgu user-77=philmcph user-78=donnychicago user-79=firstre5 user-80=steakbridieme user-81=lkpier user-82=smrszyqg user-83=isleofwi user-84=barbersh user-85=tigerlet user-86=hidden user-87=nomistakes user-88=reliable user-89=ninejimm user-90=cambria1 user-91=cathski user-92=howardon user-93=paulmca1 user-94=pugwash user-95=cwsocial user-96=hirefootballgame user-97=courseme user-98=eugincou user-99=sibtoncc user-100=asandcoc user-101=zebrapho
Sep 22 08:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bwppodcast user-103=steve user-104=burydropin user-105=fawcettd user-106=nsceres user-107=eatspam user-108=darkstar user-109=beauty user-110=dhyana user-111=nove user-112=boldover user-113=sosevalu user-114=crrtipdl user-115=bakery user-116=what user-117=tstardom user-118=oubpgvbx user-119=nvihkvu user-120=cath user-121=sketchy user-122=havantho user-123=kategilpin user-124=ladburyp user-125=dancinggardener user-126=stagingerris user-127=design user-128=tomandle user-129=jennimil user-130=mcdermos user-131=chrisdal user-132=careers user-133=nbhavers user-134=david user-135=attlebor user-136=lucy user-137=onlycont user-138=branko user-139=hodgsonmail user-140=outdoorc user-141=ranxterc user-142=romaldki feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 08:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 08:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:43 nativespace-cdp sudo[856141]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 08:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:44 nativespace-cdp sudo[856152]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Vt0WalI9rWg7sycz.~
Sep 22 08:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:44 nativespace-cdp sudo[856157]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Vt0WalI9rWg7sycz.~'
Sep 22 08:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:44 nativespace-cdp sudo[856161]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Vt0WalI9rWg7sycz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 08:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:44 nativespace-cdp sudo[856167]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 08:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:44 nativespace-cdp sudo[856172]: pam_unix(sudo:session): session closed for user root
Sep 22 08:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 08:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 08:09:51 nativespace-cdp sudo[856211]: pam_unix(sudo:session): session closed for user root
Sep 22 08:11:33 nativespace-cdp sshd[856719]: Connection closed by 159.100.136.21 port 34974 [preauth]
Sep 22 08:16:35 nativespace-cdp sshd[858025]: Connection closed by 159.100.136.21 port 44240 [preauth]
Sep 22 08:21:33 nativespace-cdp sshd[859203]: Connection closed by 159.100.136.21 port 53452 [preauth]
Sep 22 08:26:35 nativespace-cdp sshd[860299]: Connection closed by 159.100.136.21 port 34740 [preauth]
Sep 22 08:31:33 nativespace-cdp sshd[861599]: Connection closed by 159.100.136.21 port 43890 [preauth]
Sep 22 08:36:36 nativespace-cdp sshd[862613]: Connection closed by 159.100.136.21 port 53376 [preauth]
Sep 22 08:41:36 nativespace-cdp sshd[863691]: Connection closed by 159.100.136.21 port 34238 [preauth]
Sep 22 08:46:35 nativespace-cdp sshd[864981]: Connection closed by 159.100.136.21 port 43664 [preauth]
Sep 22 08:51:33 nativespace-cdp sshd[866074]: Connection closed by 159.100.136.21 port 52876 [preauth]
Sep 22 08:56:36 nativespace-cdp sshd[867159]: Connection closed by 159.100.136.21 port 34028 [preauth]
Sep 22 09:01:33 nativespace-cdp sshd[868583]: Connection closed by 159.100.136.21 port 43442 [preauth]
Sep 22 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:31 nativespace-cdp sudo[870792]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:31 nativespace-cdp sudo[870796]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:33 nativespace-cdp sshd[870780]: Invalid user daniel from 103.149.26.91 port 58484
Sep 22 09:09:33 nativespace-cdp sshd[870780]: input_userauth_request: invalid user daniel [preauth]
Sep 22 09:09:33 nativespace-cdp sshd[870780]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 09:09:33 nativespace-cdp sshd[870780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.26.91
Sep 22 09:09:33 nativespace-cdp sudo[870801]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 09:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:33 nativespace-cdp sudo[870815]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 09:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:35 nativespace-cdp sshd[870780]: Failed password for invalid user daniel from 103.149.26.91 port 58484 ssh2
Sep 22 09:09:35 nativespace-cdp sshd[870780]: Received disconnect from 103.149.26.91 port 58484:11: Bye Bye [preauth]
Sep 22 09:09:35 nativespace-cdp sshd[870780]: Disconnected from 103.149.26.91 port 58484 [preauth]
Sep 22 09:09:36 nativespace-cdp sudo[870821]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:37 nativespace-cdp sudo[870844]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:37 nativespace-cdp sudo[870849]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:37 nativespace-cdp sudo[870853]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:37 nativespace-cdp sudo[870858]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:37 nativespace-cdp sudo[870863]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:37 nativespace-cdp sudo[870869]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 09:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:46 nativespace-cdp sudo[870921]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 09:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:48 nativespace-cdp sudo[870935]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=magichat user-2=lbhyisi user-3=hhdugcor user-4=dickemery123 user-5=ptkxhsbt user-6=martsblo user-7=musorguk user-8=megacards user-9=wilsonsw user-10=strathar user-11=sarafoundation user-12=atestord user-13=lakesan1 user-14=brmrjxl user-15=stephani user-16=leereyn1 user-17=still user-18=agproduc user-19=spectrum user-20=theblack user-21=hodgesonweb user-22=jarvisin user-23=ulsukarm user-24=athenare user-25=connect9 user-26=vantagep user-27=maflemin user-28=lbscrmod user-29=markward user-30=booff user-31=foundation user-32=nativene user-33=innovat1 user-34=stuartge user-35=askhform user-36=skyfirec user-37=alexadmin user-38=belle user-39=ggaaorgu user-40=newstoda user-41=bemadonn user-42=bedfords user-43=firstre2 user-44=vivienn1 user-45=battlere user-46=oneoarco user-47=brighto1 user-48=nstriton
Sep 22 09:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=connectedshoppin user-50=thqkgnbz user-51=accooper user-52=ianrayne user-53=hubmaster user-54=carsinyo user-55=fetch user-56=gilpin user-57=milloyco user-58=elecleis user-59=firstred user-60=southlon user-61=highlegh user-62=firstrel user-63=clarkass user-64=costestimatorco user-65=opaiscyx user-66=coursemc user-67=jonhartl user-68=seftvta user-69=ultbcrra user-70=firstres user-71=eugincou user-72=courseme user-73=hirefootballgame user-74=howardon user-75=pugwash user-76=paulmca1 user-77=cwsocial user-78=cathski user-79=cambria1 user-80=reliable user-81=ninejimm user-82=hidden user-83=nomistakes user-84=barbersh user-85=tigerlet user-86=isleofwi user-87=smrszyqg user-88=lkpier user-89=philmcph user-90=ctedorgu user-91=firstre5 user-92=steakbridieme user-93=donnychicago user-94=nscdp user-95=fortunaz user-96=health2045 user-97=foods user-98=leftie user-99=dhyana user-100=beauty user-101=eatspam
Sep 22 09:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=darkstar user-103=nsceres user-104=burydropin user-105=fawcettd user-106=steve user-107=bwppodcast user-108=zebrapho user-109=sibtoncc user-110=asandcoc user-111=design user-112=ladburyp user-113=stagingerris user-114=dancinggardener user-115=kategilpin user-116=cath user-117=sketchy user-118=havantho user-119=nvihkvu user-120=tstardom user-121=oubpgvbx user-122=what user-123=bakery user-124=sosevalu user-125=crrtipdl user-126=boldover user-127=nove user-128=romaldki user-129=hodgsonmail user-130=outdoorc user-131=ranxterc user-132=branko user-133=onlycont user-134=attlebor user-135=lucy user-136=nbhavers user-137=careers user-138=david user-139=chrisdal user-140=mcdermos user-141=jennimil user-142=tomandle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 09:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 09:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:49 nativespace-cdp sudo[870944]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 09:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:49 nativespace-cdp sudo[870951]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8AW4mHUTIcjW9G5i.~
Sep 22 09:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:49 nativespace-cdp sudo[870956]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8AW4mHUTIcjW9G5i.~'
Sep 22 09:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:49 nativespace-cdp sudo[870960]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8AW4mHUTIcjW9G5i.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 09:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:49 nativespace-cdp sudo[870966]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 09:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:49 nativespace-cdp sudo[870972]: pam_unix(sudo:session): session closed for user root
Sep 22 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 09:09:52 nativespace-cdp sudo[871000]: pam_unix(sudo:session): session closed for user root
Sep 22 09:11:34 nativespace-cdp sshd[871502]: Connection closed by 159.100.136.21 port 33354 [preauth]
Sep 22 09:14:50 nativespace-cdp sshd[872207]: Bad protocol version identification '\003' from 45.227.254.8 port 65204
Sep 22 09:15:09 nativespace-cdp sshd[872374]: Invalid user user4 from 103.149.26.91 port 55118
Sep 22 09:15:09 nativespace-cdp sshd[872374]: input_userauth_request: invalid user user4 [preauth]
Sep 22 09:15:09 nativespace-cdp sshd[872374]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 09:15:09 nativespace-cdp sshd[872374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.26.91
Sep 22 09:15:11 nativespace-cdp sshd[872374]: Failed password for invalid user user4 from 103.149.26.91 port 55118 ssh2
Sep 22 09:15:11 nativespace-cdp sshd[872374]: Received disconnect from 103.149.26.91 port 55118:11: Bye Bye [preauth]
Sep 22 09:15:11 nativespace-cdp sshd[872374]: Disconnected from 103.149.26.91 port 55118 [preauth]
Sep 22 09:16:09 nativespace-cdp sshd[872745]: Received disconnect from 103.149.26.91 port 39870:11: Bye Bye [preauth]
Sep 22 09:16:09 nativespace-cdp sshd[872745]: Disconnected from 103.149.26.91 port 39870 [preauth]
Sep 22 09:16:35 nativespace-cdp sshd[872847]: Connection closed by 159.100.136.21 port 42752 [preauth]
Sep 22 09:17:00 nativespace-cdp sshd[872908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.26.91  user=root
Sep 22 09:17:00 nativespace-cdp sshd[872908]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 09:17:02 nativespace-cdp sshd[872908]: Failed password for root from 103.149.26.91 port 52868 ssh2
Sep 22 09:17:02 nativespace-cdp sshd[872908]: Received disconnect from 103.149.26.91 port 52868:11: Bye Bye [preauth]
Sep 22 09:17:02 nativespace-cdp sshd[872908]: Disconnected from 103.149.26.91 port 52868 [preauth]
Sep 22 09:21:33 nativespace-cdp sshd[874017]: Connection closed by 159.100.136.21 port 51580 [preauth]
Sep 22 09:26:33 nativespace-cdp sshd[875020]: Connection closed by 159.100.136.21 port 60580 [preauth]
Sep 22 09:31:33 nativespace-cdp sshd[876299]: Connection closed by 159.100.136.21 port 41496 [preauth]
Sep 22 09:36:34 nativespace-cdp sshd[877530]: Connection closed by 159.100.136.21 port 50998 [preauth]
Sep 22 09:41:33 nativespace-cdp sshd[878650]: Connection closed by 159.100.136.21 port 59950 [preauth]
Sep 22 09:46:37 nativespace-cdp sshd[880024]: Connection closed by 159.100.136.21 port 41464 [preauth]
Sep 22 09:51:33 nativespace-cdp sshd[881161]: Connection closed by 159.100.136.21 port 50342 [preauth]
Sep 22 09:56:33 nativespace-cdp sshd[882146]: Connection closed by 159.100.136.21 port 59628 [preauth]
Sep 22 10:01:33 nativespace-cdp sshd[883372]: Connection closed by 159.100.136.21 port 40742 [preauth]
Sep 22 10:06:35 nativespace-cdp sshd[884551]: Connection closed by 159.100.136.21 port 49874 [preauth]
Sep 22 10:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 10:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:26 nativespace-cdp sudo[885040]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 10:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:26 nativespace-cdp sudo[885046]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 10:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:27 nativespace-cdp sudo[885051]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 10:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:27 nativespace-cdp sudo[885065]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 10:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:29 nativespace-cdp sudo[885071]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:29 nativespace-cdp sudo[885081]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:29 nativespace-cdp sudo[885086]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:29 nativespace-cdp sudo[885090]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:29 nativespace-cdp sudo[885095]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:29 nativespace-cdp sudo[885100]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:29 nativespace-cdp sudo[885106]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:36 nativespace-cdp sudo[885160]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:36 nativespace-cdp sudo[885174]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dhyana user-2=darkstar user-3=eatspam user-4=beauty user-5=nsceres user-6=fawcettd user-7=burydropin user-8=steve user-9=zebrapho user-10=bwppodcast user-11=asandcoc user-12=sibtoncc user-13=courseme user-14=eugincou user-15=hirefootballgame user-16=cwsocial user-17=paulmca1 user-18=howardon user-19=pugwash user-20=ninejimm user-21=reliable user-22=cathski user-23=cambria1 user-24=barbersh user-25=tigerlet user-26=nomistakes user-27=hidden user-28=isleofwi user-29=smrszyqg user-30=donnychicago user-31=firstre5 user-32=steakbridieme user-33=ctedorgu user-34=philmcph user-35=lkpier user-36=foods user-37=leftie user-38=fortunaz user-39=health2045 user-40=nscdp user-41=romaldki user-42=branko user-43=ranxterc user-44=hodgsonmail user-45=outdoorc user-46=onlycont user-47=lucy user-48=attlebor
Sep 22 10:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=david user-50=careers user-51=nbhavers user-52=mcdermos user-53=chrisdal user-54=jennimil user-55=tomandle user-56=design user-57=kategilpin user-58=dancinggardener user-59=stagingerris user-60=ladburyp user-61=nvihkvu user-62=havantho user-63=sketchy user-64=cath user-65=what user-66=tstardom user-67=oubpgvbx user-68=crrtipdl user-69=sosevalu user-70=bakery user-71=boldover user-72=nove user-73=leereyn1 user-74=stephani user-75=agproduc user-76=still user-77=theblack user-78=hodgesonweb user-79=spectrum user-80=jarvisin user-81=ulsukarm user-82=lbscrmod user-83=maflemin user-84=vantagep user-85=connect9 user-86=athenare user-87=booff user-88=markward user-89=foundation user-90=magichat user-91=hhdugcor user-92=lbhyisi user-93=ptkxhsbt user-94=dickemery123 user-95=martsblo user-96=megacards user-97=musorguk user-98=wilsonsw user-99=atestord user-100=sarafoundation user-101=strathar user-102=brmrjxl
Sep 22 10:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=lakesan1 user-104=thqkgnbz user-105=connectedshoppin user-106=ianrayne user-107=accooper user-108=fetch user-109=carsinyo user-110=hubmaster user-111=elecleis user-112=gilpin user-113=milloyco user-114=highlegh user-115=southlon user-116=firstred user-117=costestimatorco user-118=firstrel user-119=clarkass user-120=coursemc user-121=opaiscyx user-122=firstres user-123=ultbcrra user-124=seftvta user-125=jonhartl user-126=nativene user-127=askhform user-128=stuartge user-129=innovat1 user-130=alexadmin user-131=skyfirec user-132=bemadonn user-133=newstoda user-134=belle user-135=ggaaorgu user-136=bedfords user-137=oneoarco user-138=battlere user-139=vivienn1 user-140=firstre2 user-141=nstriton user-142=brighto1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 10:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:37 nativespace-cdp sudo[885194]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:38 nativespace-cdp sudo[885253]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XyTnCAnVxj7wWQ3W.~
Sep 22 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:38 nativespace-cdp sudo[885258]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XyTnCAnVxj7wWQ3W.~'
Sep 22 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:38 nativespace-cdp sudo[885262]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XyTnCAnVxj7wWQ3W.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:38 nativespace-cdp sudo[885268]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:38 nativespace-cdp sudo[885273]: pam_unix(sudo:session): session closed for user root
Sep 22 10:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 10:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 10:09:40 nativespace-cdp sudo[885298]: pam_unix(sudo:session): session closed for user root
Sep 22 10:11:33 nativespace-cdp sshd[885822]: Connection closed by 159.100.136.21 port 57810 [preauth]
Sep 22 10:16:33 nativespace-cdp sshd[887224]: Connection closed by 159.100.136.21 port 38610 [preauth]
Sep 22 10:21:40 nativespace-cdp sshd[888530]: Connection closed by 159.100.136.21 port 48178 [preauth]
Sep 22 10:26:33 nativespace-cdp sshd[889724]: Connection closed by 159.100.136.21 port 57922 [preauth]
Sep 22 10:31:36 nativespace-cdp sshd[891360]: Connection closed by 159.100.136.21 port 38836 [preauth]
Sep 22 10:36:34 nativespace-cdp sshd[892699]: Connection closed by 159.100.136.21 port 48262 [preauth]
Sep 22 10:41:33 nativespace-cdp sshd[894274]: Connection closed by 159.100.136.21 port 57236 [preauth]
Sep 22 10:46:33 nativespace-cdp sshd[895868]: Connection closed by 159.100.136.21 port 37952 [preauth]
Sep 22 10:51:35 nativespace-cdp sshd[896926]: Connection closed by 159.100.136.21 port 45650 [preauth]
Sep 22 10:56:33 nativespace-cdp sshd[898130]: Connection closed by 159.100.136.21 port 54940 [preauth]
Sep 22 10:58:21 nativespace-cdp sshd[898392]: Connection closed by 167.94.146.49 port 56364 [preauth]
Sep 22 11:01:33 nativespace-cdp sshd[899330]: Connection closed by 159.100.136.21 port 35874 [preauth]
Sep 22 11:06:34 nativespace-cdp sshd[900457]: Connection closed by 159.100.136.21 port 45324 [preauth]
Sep 22 11:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 11:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:33 nativespace-cdp sudo[900971]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 11:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:33 nativespace-cdp sudo[900975]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:34 nativespace-cdp sudo[900980]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:34 nativespace-cdp sudo[900989]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 11:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:38 nativespace-cdp sudo[900995]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 11:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:38 nativespace-cdp sudo[901009]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 11:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:38 nativespace-cdp sudo[901014]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 11:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:38 nativespace-cdp sudo[901018]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 11:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:38 nativespace-cdp sudo[901023]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 11:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:38 nativespace-cdp sudo[901028]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 11:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:38 nativespace-cdp sudo[901034]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 11:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:42 nativespace-cdp sudo[901051]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 11:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:43 nativespace-cdp sudo[901058]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=innovat1 user-2=askhform user-3=stuartge user-4=nativene user-5=skyfirec user-6=alexadmin user-7=bedfords user-8=newstoda user-9=belle user-10=ggaaorgu user-11=bemadonn user-12=nstriton user-13=brighto1 user-14=vivienn1 user-15=firstre2 user-16=oneoarco user-17=battlere user-18=accooper user-19=ianrayne user-20=connectedshoppin user-21=thqkgnbz user-22=gilpin user-23=milloyco user-24=elecleis user-25=hubmaster user-26=fetch user-27=carsinyo user-28=firstrel user-29=clarkass user-30=costestimatorco user-31=firstred user-32=highlegh user-33=southlon user-34=ultbcrra user-35=jonhartl user-36=seftvta user-37=firstres user-38=opaiscyx user-39=coursemc user-40=hhdugcor user-41=lbhyisi user-42=magichat user-43=martsblo user-44=dickemery123 user-45=ptkxhsbt user-46=wilsonsw user-47=megacards
Sep 22 11:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=musorguk user-49=brmrjxl user-50=lakesan1 user-51=strathar user-52=atestord user-53=sarafoundation user-54=agproduc user-55=still user-56=stephani user-57=leereyn1 user-58=jarvisin user-59=spectrum user-60=theblack user-61=hodgesonweb user-62=ulsukarm user-63=markward user-64=booff user-65=foundation user-66=vantagep user-67=connect9 user-68=athenare user-69=lbscrmod user-70=maflemin user-71=dancinggardener user-72=stagingerris user-73=ladburyp user-74=kategilpin user-75=design user-76=oubpgvbx user-77=tstardom user-78=what user-79=havantho user-80=cath user-81=sketchy user-82=nvihkvu user-83=bakery user-84=crrtipdl user-85=sosevalu user-86=nove user-87=boldover user-88=hodgsonmail user-89=outdoorc user-90=ranxterc user-91=branko user-92=romaldki user-93=lucy user-94=attlebor user-95=onlycont user-96=chrisdal user-97=mcdermos user-98=david user-99=nbhavers user-100=careers user-101=tomandle
Sep 22 11:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=jennimil user-103=hirefootballgame user-104=eugincou user-105=courseme user-106=cambria1 user-107=cathski user-108=reliable user-109=ninejimm user-110=cwsocial user-111=howardon user-112=pugwash user-113=paulmca1 user-114=isleofwi user-115=smrszyqg user-116=nomistakes user-117=hidden user-118=tigerlet user-119=barbersh user-120=nscdp user-121=leftie user-122=foods user-123=health2045 user-124=fortunaz user-125=lkpier user-126=donnychicago user-127=firstre5 user-128=steakbridieme user-129=philmcph user-130=ctedorgu user-131=beauty user-132=darkstar user-133=eatspam user-134=dhyana user-135=fawcettd user-136=burydropin user-137=nsceres user-138=bwppodcast user-139=zebrapho user-140=steve user-141=asandcoc user-142=sibtoncc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 11:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 11:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:44 nativespace-cdp sudo[901069]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 22 11:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:46 nativespace-cdp sudo[901084]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 22 11:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 22 11:09:46 nativespace-cdp sudo[901090]: pam_unix(sudo:session): session closed for user onlycont
Sep 22 11:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 22 11:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:47 nativespace-cdp sudo[901103]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 22 11:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 11:09:47 nativespace-cdp sudo[901109]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 11:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 22 11:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:49 nativespace-cdp sudo[901130]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 22 11:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 22 11:09:49 nativespace-cdp sudo[901136]: pam_unix(sudo:session): session closed for user lkpier
Sep 22 11:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 22 11:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:50 nativespace-cdp sudo[901159]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 22 11:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 22 11:09:50 nativespace-cdp sudo[901168]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 22 11:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 22 11:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 22 11:09:50 nativespace-cdp sudo[901181]: pam_unix(sudo:session): session closed for user oneoarco
Sep 22 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 22 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:51 nativespace-cdp sudo[901193]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 22 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 22 11:09:51 nativespace-cdp sudo[901199]: pam_unix(sudo:session): session closed for user fortunaz
Sep 22 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 22 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:51 nativespace-cdp sudo[901213]: pam_unix(sudo:session): session closed for user root
Sep 22 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:09:51 nativespace-cdp sudo[901217]: pam_unix(sudo:session): session closed for user root
Sep 22 11:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 22 11:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:10:10 nativespace-cdp sudo[902317]: pam_unix(sudo:session): session closed for user root
Sep 22 11:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 22 11:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:10:10 nativespace-cdp sudo[902321]: pam_unix(sudo:session): session closed for user root
Sep 22 11:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 11:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:10:12 nativespace-cdp sudo[902327]: pam_unix(sudo:session): session closed for user root
Sep 22 11:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jYPwYdxGpjQyXvus.~
Sep 22 11:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:10:12 nativespace-cdp sudo[902330]: pam_unix(sudo:session): session closed for user root
Sep 22 11:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jYPwYdxGpjQyXvus.~'
Sep 22 11:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:10:12 nativespace-cdp sudo[902333]: pam_unix(sudo:session): session closed for user root
Sep 22 11:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jYPwYdxGpjQyXvus.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 11:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:10:12 nativespace-cdp sudo[902339]: pam_unix(sudo:session): session closed for user root
Sep 22 11:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 11:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:10:12 nativespace-cdp sudo[902343]: pam_unix(sudo:session): session closed for user root
Sep 22 11:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 11:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 11:10:13 nativespace-cdp sudo[902360]: pam_unix(sudo:session): session closed for user root
Sep 22 11:11:36 nativespace-cdp sshd[902613]: Connection closed by 159.100.136.21 port 54406 [preauth]
Sep 22 11:16:33 nativespace-cdp sshd[903839]: Connection closed by 159.100.136.21 port 34696 [preauth]
Sep 22 11:21:33 nativespace-cdp sshd[904994]: Connection closed by 159.100.136.21 port 43658 [preauth]
Sep 22 11:26:33 nativespace-cdp sshd[906082]: Connection closed by 159.100.136.21 port 53114 [preauth]
Sep 22 11:31:33 nativespace-cdp sshd[907238]: Connection closed by 159.100.136.21 port 33986 [preauth]
Sep 22 11:36:33 nativespace-cdp sshd[908633]: Connection closed by 159.100.136.21 port 43520 [preauth]
Sep 22 11:41:33 nativespace-cdp sshd[909700]: Connection closed by 159.100.136.21 port 52906 [preauth]
Sep 22 11:46:33 nativespace-cdp sshd[911000]: Connection closed by 159.100.136.21 port 33892 [preauth]
Sep 22 11:51:36 nativespace-cdp sshd[912287]: Connection closed by 159.100.136.21 port 42894 [preauth]
Sep 22 11:56:33 nativespace-cdp sshd[913544]: Connection closed by 159.100.136.21 port 52504 [preauth]
Sep 22 12:01:33 nativespace-cdp sshd[914964]: Connection closed by 159.100.136.21 port 32954 [preauth]
Sep 22 12:06:34 nativespace-cdp sshd[916276]: Connection closed by 159.100.136.21 port 42380 [preauth]
Sep 22 12:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 12:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:48 nativespace-cdp sudo[916889]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 12:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:48 nativespace-cdp sudo[916895]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 12:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:50 nativespace-cdp sudo[916903]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:50 nativespace-cdp sudo[916916]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:54 nativespace-cdp sudo[916923]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 12:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:54 nativespace-cdp sudo[916948]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 12:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:55 nativespace-cdp sudo[916953]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 12:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:55 nativespace-cdp sudo[916957]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 12:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:55 nativespace-cdp sudo[916962]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 12:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:55 nativespace-cdp sudo[916969]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 12:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:55 nativespace-cdp sudo[916974]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 12:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:57 nativespace-cdp sudo[916985]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 12:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:58 nativespace-cdp sudo[916991]: pam_unix(sudo:session): session closed for user root
Sep 22 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=careers user-2=nbhavers user-3=david user-4=chrisdal user-5=mcdermos user-6=jennimil user-7=tomandle user-8=romaldki user-9=hodgsonmail user-10=outdoorc user-11=ranxterc user-12=branko user-13=onlycont user-14=attlebor user-15=lucy user-16=bakery user-17=sosevalu user-18=crrtipdl user-19=boldover user-20=nove user-21=design user-22=ladburyp user-23=stagingerris user-24=dancinggardener user-25=kategilpin user-26=cath user-27=sketchy user-28=havantho user-29=nvihkvu user-30=tstardom user-31=oubpgvbx user-32=what user-33=steve user-34=bwppodcast user-35=zebrapho user-36=sibtoncc user-37=asandcoc user-38=dhyana user-39=beauty user-40=eatspam user-41=darkstar user-42=nsceres user-43=burydropin user-44=fawcettd user-45=hidden user-46=nomistakes user-47=tigerlet user-48=barbersh user-49=smrszyqg
Sep 22 12:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=isleofwi user-51=lkpier user-52=ctedorgu user-53=philmcph user-54=firstre5 user-55=steakbridieme user-56=donnychicago user-57=nscdp user-58=health2045 user-59=fortunaz user-60=foods user-61=leftie user-62=eugincou user-63=courseme user-64=hirefootballgame user-65=pugwash user-66=howardon user-67=paulmca1 user-68=cwsocial user-69=cambria1 user-70=cathski user-71=ninejimm user-72=reliable user-73=firstred user-74=southlon user-75=highlegh user-76=firstrel user-77=clarkass user-78=costestimatorco user-79=coursemc user-80=opaiscyx user-81=jonhartl user-82=seftvta user-83=ultbcrra user-84=firstres user-85=connectedshoppin user-86=thqkgnbz user-87=accooper user-88=ianrayne user-89=hubmaster user-90=carsinyo user-91=fetch user-92=gilpin user-93=milloyco user-94=elecleis user-95=belle user-96=ggaaorgu user-97=newstoda user-98=bemadonn user-99=bedfords user-100=firstre2 user-101=vivienn1 user-102=battlere
Sep 22 12:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=oneoarco user-104=brighto1 user-105=nstriton user-106=nativene user-107=innovat1 user-108=askhform user-109=stuartge user-110=skyfirec user-111=alexadmin user-112=ulsukarm user-113=connect9 user-114=athenare user-115=vantagep user-116=maflemin user-117=lbscrmod user-118=foundation user-119=booff user-120=markward user-121=stephani user-122=leereyn1 user-123=still user-124=agproduc user-125=spectrum user-126=theblack user-127=hodgesonweb user-128=jarvisin user-129=musorguk user-130=megacards user-131=wilsonsw user-132=strathar user-133=sarafoundation user-134=atestord user-135=lakesan1 user-136=brmrjxl user-137=magichat user-138=lbhyisi user-139=hhdugcor user-140=dickemery123 user-141=ptkxhsbt user-142=martsblo feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 12:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:09:59 nativespace-cdp sudo[916999]: pam_unix(sudo:session): session closed for user root
Sep 22 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:10:00 nativespace-cdp sudo[917011]: pam_unix(sudo:session): session closed for user root
Sep 22 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-RQj9DLyAoTzVnDRO.~
Sep 22 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:10:00 nativespace-cdp sudo[917016]: pam_unix(sudo:session): session closed for user root
Sep 22 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-RQj9DLyAoTzVnDRO.~'
Sep 22 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:10:00 nativespace-cdp sudo[917020]: pam_unix(sudo:session): session closed for user root
Sep 22 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-RQj9DLyAoTzVnDRO.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:10:00 nativespace-cdp sudo[917026]: pam_unix(sudo:session): session closed for user root
Sep 22 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:10:00 nativespace-cdp sudo[917031]: pam_unix(sudo:session): session closed for user root
Sep 22 12:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 12:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 12:10:01 nativespace-cdp sudo[917052]: pam_unix(sudo:session): session closed for user root
Sep 22 12:11:33 nativespace-cdp sshd[917592]: Connection closed by 159.100.136.21 port 51264 [preauth]
Sep 22 12:16:33 nativespace-cdp sshd[918966]: Connection closed by 159.100.136.21 port 59946 [preauth]
Sep 22 12:21:33 nativespace-cdp sshd[920090]: Connection closed by 159.100.136.21 port 40840 [preauth]
Sep 22 12:26:33 nativespace-cdp sshd[921241]: Connection closed by 159.100.136.21 port 50166 [preauth]
Sep 22 12:29:12 nativespace-cdp sshd[921791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.179.214  user=root
Sep 22 12:29:12 nativespace-cdp sshd[921791]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 12:29:15 nativespace-cdp sshd[921791]: Failed password for root from 182.16.179.214 port 39280 ssh2
Sep 22 12:29:15 nativespace-cdp sshd[921791]: Received disconnect from 182.16.179.214 port 39280:11: Bye Bye [preauth]
Sep 22 12:29:15 nativespace-cdp sshd[921791]: Disconnected from 182.16.179.214 port 39280 [preauth]
Sep 22 12:29:45 nativespace-cdp sshd[921885]: Invalid user abhishek from 15.235.206.113 port 54314
Sep 22 12:29:45 nativespace-cdp sshd[921885]: input_userauth_request: invalid user abhishek [preauth]
Sep 22 12:29:45 nativespace-cdp sshd[921885]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 12:29:45 nativespace-cdp sshd[921885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.235.206.113
Sep 22 12:29:47 nativespace-cdp sshd[921885]: Failed password for invalid user abhishek from 15.235.206.113 port 54314 ssh2
Sep 22 12:29:47 nativespace-cdp sshd[921885]: Received disconnect from 15.235.206.113 port 54314:11: Bye Bye [preauth]
Sep 22 12:29:47 nativespace-cdp sshd[921885]: Disconnected from 15.235.206.113 port 54314 [preauth]
Sep 22 12:30:46 nativespace-cdp sshd[922349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.179.214  user=david
Sep 22 12:30:49 nativespace-cdp sshd[922349]: Failed password for david from 182.16.179.214 port 46270 ssh2
Sep 22 12:30:49 nativespace-cdp sshd[922349]: Received disconnect from 182.16.179.214 port 46270:11: Bye Bye [preauth]
Sep 22 12:30:49 nativespace-cdp sshd[922349]: Disconnected from 182.16.179.214 port 46270 [preauth]
Sep 22 12:31:33 nativespace-cdp sshd[922678]: Connection closed by 159.100.136.21 port 59378 [preauth]
Sep 22 12:32:04 nativespace-cdp sshd[922797]: Invalid user ubuntu from 51.75.25.97 port 56198
Sep 22 12:32:04 nativespace-cdp sshd[922797]: input_userauth_request: invalid user ubuntu [preauth]
Sep 22 12:32:04 nativespace-cdp sshd[922797]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 12:32:04 nativespace-cdp sshd[922797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.25.97
Sep 22 12:32:07 nativespace-cdp sshd[922797]: Failed password for invalid user ubuntu from 51.75.25.97 port 56198 ssh2
Sep 22 12:32:10 nativespace-cdp sshd[922797]: Received disconnect from 51.75.25.97 port 56198:11: Bye Bye [preauth]
Sep 22 12:32:10 nativespace-cdp sshd[922797]: Disconnected from 51.75.25.97 port 56198 [preauth]
Sep 22 12:32:15 nativespace-cdp sshd[922807]: Invalid user root01 from 182.16.179.214 port 50764
Sep 22 12:32:15 nativespace-cdp sshd[922807]: input_userauth_request: invalid user root01 [preauth]
Sep 22 12:32:15 nativespace-cdp sshd[922807]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 12:32:15 nativespace-cdp sshd[922807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.179.214
Sep 22 12:32:17 nativespace-cdp sshd[922807]: Failed password for invalid user root01 from 182.16.179.214 port 50764 ssh2
Sep 22 12:32:18 nativespace-cdp sshd[922807]: Received disconnect from 182.16.179.214 port 50764:11: Bye Bye [preauth]
Sep 22 12:32:18 nativespace-cdp sshd[922807]: Disconnected from 182.16.179.214 port 50764 [preauth]
Sep 22 12:33:09 nativespace-cdp sshd[923042]: Invalid user test from 15.235.206.113 port 35464
Sep 22 12:33:09 nativespace-cdp sshd[923042]: input_userauth_request: invalid user test [preauth]
Sep 22 12:33:09 nativespace-cdp sshd[923042]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 12:33:09 nativespace-cdp sshd[923042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.235.206.113
Sep 22 12:33:11 nativespace-cdp sshd[923042]: Failed password for invalid user test from 15.235.206.113 port 35464 ssh2
Sep 22 12:33:14 nativespace-cdp sshd[923042]: Received disconnect from 15.235.206.113 port 35464:11: Bye Bye [preauth]
Sep 22 12:33:14 nativespace-cdp sshd[923042]: Disconnected from 15.235.206.113 port 35464 [preauth]
Sep 22 12:33:15 nativespace-cdp sshd[923062]: Invalid user support from 51.75.25.97 port 52818
Sep 22 12:33:15 nativespace-cdp sshd[923062]: input_userauth_request: invalid user support [preauth]
Sep 22 12:33:15 nativespace-cdp sshd[923062]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 12:33:15 nativespace-cdp sshd[923062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.25.97
Sep 22 12:33:17 nativespace-cdp sshd[923062]: Failed password for invalid user support from 51.75.25.97 port 52818 ssh2
Sep 22 12:33:17 nativespace-cdp sshd[923062]: Received disconnect from 51.75.25.97 port 52818:11: Bye Bye [preauth]
Sep 22 12:33:17 nativespace-cdp sshd[923062]: Disconnected from 51.75.25.97 port 52818 [preauth]
Sep 22 12:33:55 nativespace-cdp sshd[923165]: Invalid user sysadmin from 51.75.25.97 port 53510
Sep 22 12:33:55 nativespace-cdp sshd[923165]: input_userauth_request: invalid user sysadmin [preauth]
Sep 22 12:33:55 nativespace-cdp sshd[923165]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 12:33:55 nativespace-cdp sshd[923165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.25.97
Sep 22 12:33:56 nativespace-cdp sshd[923165]: Failed password for invalid user sysadmin from 51.75.25.97 port 53510 ssh2
Sep 22 12:33:56 nativespace-cdp sshd[923165]: Received disconnect from 51.75.25.97 port 53510:11: Bye Bye [preauth]
Sep 22 12:33:56 nativespace-cdp sshd[923165]: Disconnected from 51.75.25.97 port 53510 [preauth]
Sep 22 12:33:59 nativespace-cdp sshd[923178]: Invalid user support from 15.235.206.113 port 57112
Sep 22 12:33:59 nativespace-cdp sshd[923178]: input_userauth_request: invalid user support [preauth]
Sep 22 12:33:59 nativespace-cdp sshd[923178]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 12:33:59 nativespace-cdp sshd[923178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.235.206.113
Sep 22 12:34:02 nativespace-cdp sshd[923178]: Failed password for invalid user support from 15.235.206.113 port 57112 ssh2
Sep 22 12:41:33 nativespace-cdp sshd[924940]: Connection closed by 159.100.136.21 port 49572 [preauth]
Sep 22 12:46:33 nativespace-cdp sshd[926109]: Connection closed by 159.100.136.21 port 58778 [preauth]
Sep 22 12:51:34 nativespace-cdp sshd[927305]: Connection closed by 159.100.136.21 port 39750 [preauth]
Sep 22 12:56:33 nativespace-cdp sshd[928307]: Connection closed by 159.100.136.21 port 48966 [preauth]
Sep 22 13:01:33 nativespace-cdp sshd[929771]: Connection closed by 159.100.136.21 port 58438 [preauth]
Sep 22 13:06:33 nativespace-cdp sshd[930900]: Connection closed by 159.100.136.21 port 39970 [preauth]
Sep 22 13:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 13:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:10:31 nativespace-cdp sudo[931832]: pam_unix(sudo:session): session closed for user root
Sep 22 13:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 13:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:10:32 nativespace-cdp sudo[931879]: pam_unix(sudo:session): session closed for user root
Sep 22 13:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 13:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:10:45 nativespace-cdp sudo[931883]: pam_unix(sudo:session): session closed for user root
Sep 22 13:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 13:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:10:45 nativespace-cdp sudo[931945]: pam_unix(sudo:session): session closed for user root
Sep 22 13:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 13:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:11:36 nativespace-cdp sshd[932217]: Connection closed by 159.100.136.21 port 49294 [preauth]
Sep 22 13:13:13 nativespace-cdp crond[932296]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 22 13:13:13 nativespace-cdp crond[932297]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 22 13:13:46 nativespace-cdp sudo[931951]: pam_unix(sudo:session): session closed for user root
Sep 22 13:13:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 13:13:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:13:47 nativespace-cdp sudo[932967]: pam_unix(sudo:session): session closed for user root
Sep 22 13:13:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 13:13:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:13:47 nativespace-cdp sudo[932973]: pam_unix(sudo:session): session closed for user root
Sep 22 13:13:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 13:13:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:13:47 nativespace-cdp sudo[932978]: pam_unix(sudo:session): session closed for user root
Sep 22 13:13:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 13:13:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:13:47 nativespace-cdp sudo[932983]: pam_unix(sudo:session): session closed for user root
Sep 22 13:13:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 13:13:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:13:47 nativespace-cdp sudo[932990]: pam_unix(sudo:session): session closed for user root
Sep 22 13:13:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 13:13:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:13:47 nativespace-cdp sudo[932995]: pam_unix(sudo:session): session closed for user root
Sep 22 13:14:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 13:14:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:14:03 nativespace-cdp sudo[933155]: pam_unix(sudo:session): session closed for user root
Sep 22 13:14:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 13:14:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:14:09 nativespace-cdp sudo[933206]: pam_unix(sudo:session): session closed for user root
Sep 22 13:14:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=mcdermos user-2=chrisdal user-3=david user-4=nbhavers user-5=careers user-6=tomandle user-7=jennimil user-8=branko user-9=hodgsonmail user-10=ranxterc user-11=outdoorc user-12=romaldki user-13=lucy user-14=attlebor user-15=onlycont user-16=crrtipdl user-17=sosevalu user-18=bakery user-19=nove user-20=boldover user-21=kategilpin user-22=stagingerris user-23=dancinggardener user-24=ladburyp user-25=design user-26=what user-27=tstardom user-28=oubpgvbx user-29=nvihkvu user-30=havantho user-31=cath user-32=sketchy user-33=zebrapho user-34=bwppodcast user-35=steve user-36=sibtoncc user-37=asandcoc user-38=darkstar user-39=eatspam user-40=beauty user-41=dhyana user-42=fawcettd user-43=burydropin user-44=nsceres user-45=isleofwi user-46=smrszyqg user-47=barbersh user-48=tigerlet user-49=nomistakes
Sep 22 13:14:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=hidden user-51=foods user-52=leftie user-53=health2045 user-54=fortunaz user-55=nscdp user-56=steakbridieme user-57=firstre5 user-58=donnychicago user-59=philmcph user-60=ctedorgu user-61=lkpier user-62=hirefootballgame user-63=courseme user-64=eugincou user-65=reliable user-66=ninejimm user-67=cathski user-68=cambria1 user-69=cwsocial user-70=paulmca1 user-71=howardon user-72=pugwash user-73=costestimatorco user-74=firstrel user-75=clarkass user-76=highlegh user-77=southlon user-78=firstred user-79=firstres user-80=ultbcrra user-81=seftvta user-82=jonhartl user-83=opaiscyx user-84=coursemc user-85=ianrayne user-86=accooper user-87=thqkgnbz user-88=connectedshoppin user-89=elecleis user-90=milloyco user-91=gilpin user-92=fetch user-93=carsinyo user-94=hubmaster user-95=bedfords user-96=bemadonn user-97=newstoda user-98=belle user-99=ggaaorgu user-100=nstriton user-101=brighto1 user-102=oneoarco
Sep 22 13:14:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=battlere user-104=vivienn1 user-105=firstre2 user-106=askhform user-107=stuartge user-108=innovat1 user-109=nativene user-110=alexadmin user-111=skyfirec user-112=ulsukarm user-113=booff user-114=foundation user-115=markward user-116=lbscrmod user-117=maflemin user-118=vantagep user-119=connect9 user-120=athenare user-121=agproduc user-122=still user-123=leereyn1 user-124=stephani user-125=jarvisin user-126=theblack user-127=hodgesonweb user-128=spectrum user-129=wilsonsw user-130=megacards user-131=musorguk user-132=lakesan1 user-133=brmrjxl user-134=atestord user-135=sarafoundation user-136=strathar user-137=hhdugcor user-138=lbhyisi user-139=magichat user-140=martsblo user-141=ptkxhsbt user-142=dickemery123 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 13:14:09 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 13:14:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:14:12 nativespace-cdp sudo[933225]: pam_unix(sudo:session): session closed for user root
Sep 22 13:14:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 13:14:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:14:14 nativespace-cdp sudo[933256]: pam_unix(sudo:session): session closed for user root
Sep 22 13:14:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-erLFz5pWp1RTYKAv.~
Sep 22 13:14:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:14:14 nativespace-cdp sudo[933261]: pam_unix(sudo:session): session closed for user root
Sep 22 13:14:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-erLFz5pWp1RTYKAv.~'
Sep 22 13:14:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:14:14 nativespace-cdp sudo[933264]: pam_unix(sudo:session): session closed for user root
Sep 22 13:14:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-erLFz5pWp1RTYKAv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 13:14:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:14:14 nativespace-cdp sudo[933271]: pam_unix(sudo:session): session closed for user root
Sep 22 13:14:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 13:14:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:14:14 nativespace-cdp sudo[933276]: pam_unix(sudo:session): session closed for user root
Sep 22 13:14:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 13:14:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 13:14:27 nativespace-cdp sudo[933396]: pam_unix(sudo:session): session closed for user root
Sep 22 13:16:33 nativespace-cdp sshd[934416]: Connection closed by 159.100.136.21 port 58614 [preauth]
Sep 22 13:21:35 nativespace-cdp sshd[937111]: Connection closed by 159.100.136.21 port 39632 [preauth]
Sep 22 13:26:33 nativespace-cdp sshd[939567]: Connection closed by 159.100.136.21 port 49226 [preauth]
Sep 22 13:31:33 nativespace-cdp sshd[942186]: Connection closed by 159.100.136.21 port 57794 [preauth]
Sep 22 13:36:33 nativespace-cdp sshd[944718]: Connection closed by 159.100.136.21 port 38098 [preauth]
Sep 22 13:41:33 nativespace-cdp sshd[945753]: Connection closed by 159.100.136.21 port 47030 [preauth]
Sep 22 13:46:33 nativespace-cdp sshd[947078]: Connection closed by 159.100.136.21 port 56510 [preauth]
Sep 22 13:51:33 nativespace-cdp sshd[948206]: Connection closed by 159.100.136.21 port 36734 [preauth]
Sep 22 13:56:33 nativespace-cdp sshd[949255]: Connection closed by 159.100.136.21 port 45488 [preauth]
Sep 22 14:01:33 nativespace-cdp sshd[950765]: Connection closed by 159.100.136.21 port 53934 [preauth]
Sep 22 14:06:36 nativespace-cdp sshd[951998]: Connection closed by 159.100.136.21 port 35120 [preauth]
Sep 22 14:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 14:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:44 nativespace-cdp sudo[952508]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 14:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:44 nativespace-cdp sudo[952513]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 14:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:45 nativespace-cdp sudo[952518]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 14:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:46 nativespace-cdp sudo[952525]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 14:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:49 nativespace-cdp sudo[952531]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:49 nativespace-cdp sudo[952546]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:49 nativespace-cdp sudo[952551]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:49 nativespace-cdp sudo[952555]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:49 nativespace-cdp sudo[952560]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:49 nativespace-cdp sudo[952568]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:49 nativespace-cdp sudo[952573]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 14:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:52 nativespace-cdp sudo[952586]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 14:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:53 nativespace-cdp sudo[952595]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nativene user-2=askhform user-3=stuartge user-4=innovat1 user-5=skyfirec user-6=alexadmin user-7=bemadonn user-8=newstoda user-9=ggaaorgu user-10=belle user-11=bedfords user-12=oneoarco user-13=battlere user-14=vivienn1 user-15=firstre2 user-16=nstriton user-17=brighto1 user-18=thqkgnbz user-19=connectedshoppin user-20=ianrayne user-21=accooper user-22=fetch user-23=carsinyo user-24=hubmaster user-25=elecleis user-26=milloyco user-27=gilpin user-28=highlegh user-29=southlon user-30=firstred user-31=costestimatorco user-32=clarkass user-33=firstrel user-34=coursemc user-35=opaiscyx user-36=firstres user-37=ultbcrra user-38=jonhartl user-39=seftvta user-40=magichat user-41=hhdugcor user-42=lbhyisi user-43=ptkxhsbt user-44=dickemery123 user-45=martsblo user-46=megacards user-47=musorguk
Sep 22 14:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=wilsonsw user-49=atestord user-50=sarafoundation user-51=strathar user-52=brmrjxl user-53=lakesan1 user-54=leereyn1 user-55=stephani user-56=agproduc user-57=still user-58=hodgesonweb user-59=theblack user-60=spectrum user-61=jarvisin user-62=ulsukarm user-63=lbscrmod user-64=maflemin user-65=vantagep user-66=connect9 user-67=athenare user-68=foundation user-69=booff user-70=markward user-71=design user-72=kategilpin user-73=stagingerris user-74=dancinggardener user-75=ladburyp user-76=nvihkvu user-77=havantho user-78=sketchy user-79=cath user-80=what user-81=oubpgvbx user-82=tstardom user-83=crrtipdl user-84=sosevalu user-85=bakery user-86=boldover user-87=nove user-88=romaldki user-89=branko user-90=outdoorc user-91=hodgsonmail user-92=ranxterc user-93=onlycont user-94=lucy user-95=attlebor user-96=david user-97=careers user-98=nbhavers user-99=mcdermos user-100=chrisdal user-101=jennimil
Sep 22 14:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=tomandle user-103=courseme user-104=eugincou user-105=hirefootballgame user-106=cwsocial user-107=howardon user-108=paulmca1 user-109=pugwash user-110=reliable user-111=ninejimm user-112=cathski user-113=cambria1 user-114=tigerlet user-115=barbersh user-116=nomistakes user-117=hidden user-118=isleofwi user-119=smrszyqg user-120=steakbridieme user-121=firstre5 user-122=donnychicago user-123=ctedorgu user-124=philmcph user-125=lkpier user-126=leftie user-127=foods user-128=fortunaz user-129=health2045 user-130=nscdp user-131=dhyana user-132=darkstar user-133=eatspam user-134=beauty user-135=nsceres user-136=fawcettd user-137=burydropin user-138=steve user-139=zebrapho user-140=bwppodcast user-141=asandcoc user-142=sibtoncc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 14:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:54 nativespace-cdp sudo[952602]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:55 nativespace-cdp sudo[952612]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IdOClLAH8DyGbvWc.~
Sep 22 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:55 nativespace-cdp sudo[952617]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IdOClLAH8DyGbvWc.~'
Sep 22 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:55 nativespace-cdp sudo[952621]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IdOClLAH8DyGbvWc.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:55 nativespace-cdp sudo[952627]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:55 nativespace-cdp sudo[952632]: pam_unix(sudo:session): session closed for user root
Sep 22 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 14:09:57 nativespace-cdp sudo[952658]: pam_unix(sudo:session): session closed for user root
Sep 22 14:11:36 nativespace-cdp sshd[953231]: Connection closed by 159.100.136.21 port 43644 [preauth]
Sep 22 14:16:36 nativespace-cdp sshd[954700]: Connection closed by 159.100.136.21 port 53018 [preauth]
Sep 22 14:21:33 nativespace-cdp sshd[955936]: Connection closed by 159.100.136.21 port 32814 [preauth]
Sep 22 14:26:33 nativespace-cdp sshd[957096]: Connection closed by 159.100.136.21 port 41982 [preauth]
Sep 22 14:31:35 nativespace-cdp sshd[958266]: Connection closed by 159.100.136.21 port 51084 [preauth]
Sep 22 14:41:35 nativespace-cdp sshd[960558]: Connection closed by 159.100.136.21 port 40738 [preauth]
Sep 22 14:46:35 nativespace-cdp sshd[961860]: Connection closed by 159.100.136.21 port 49188 [preauth]
Sep 22 14:51:33 nativespace-cdp sshd[962927]: Connection closed by 159.100.136.21 port 57956 [preauth]
Sep 22 14:56:33 nativespace-cdp sshd[963898]: Connection closed by 159.100.136.21 port 39114 [preauth]
Sep 22 15:01:35 nativespace-cdp sshd[965228]: Connection closed by 159.100.136.21 port 48510 [preauth]
Sep 22 15:06:33 nativespace-cdp sshd[966358]: Connection closed by 159.100.136.21 port 57830 [preauth]
Sep 22 15:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 15:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:38 nativespace-cdp sudo[967129]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 15:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:38 nativespace-cdp sudo[967133]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 15:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:39 nativespace-cdp sudo[967138]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 15:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:39 nativespace-cdp sudo[967147]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 15:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:43 nativespace-cdp sudo[967154]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:43 nativespace-cdp sudo[967170]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:43 nativespace-cdp sudo[967175]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:43 nativespace-cdp sudo[967179]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:43 nativespace-cdp sudo[967184]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:43 nativespace-cdp sudo[967191]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:43 nativespace-cdp sudo[967199]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 15:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:45 nativespace-cdp sudo[967218]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:47 nativespace-cdp sudo[967225]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=newstoda user-2=ggaaorgu user-3=belle user-4=bemadonn user-5=bedfords user-6=vivienn1 user-7=firstre2 user-8=oneoarco user-9=battlere user-10=nstriton user-11=brighto1 user-12=nativene user-13=innovat1 user-14=stuartge user-15=askhform user-16=alexadmin user-17=skyfirec user-18=firstred user-19=highlegh user-20=southlon user-21=firstrel user-22=clarkass user-23=costestimatorco user-24=opaiscyx user-25=coursemc user-26=ultbcrra user-27=seftvta user-28=jonhartl user-29=firstres user-30=connectedshoppin user-31=thqkgnbz user-32=accooper user-33=ianrayne user-34=hubmaster user-35=fetch user-36=carsinyo user-37=gilpin user-38=milloyco user-39=elecleis user-40=megacards user-41=musorguk user-42=wilsonsw user-43=strathar user-44=atestord user-45=sarafoundation user-46=lakesan1 user-47=brmrjxl
Sep 22 15:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=magichat user-49=hhdugcor user-50=lbhyisi user-51=dickemery123 user-52=ptkxhsbt user-53=martsblo user-54=ulsukarm user-55=vantagep user-56=athenare user-57=connect9 user-58=lbscrmod user-59=maflemin user-60=foundation user-61=booff user-62=markward user-63=stephani user-64=leereyn1 user-65=agproduc user-66=still user-67=spectrum user-68=theblack user-69=hodgesonweb user-70=jarvisin user-71=bakery user-72=crrtipdl user-73=sosevalu user-74=boldover user-75=nove user-76=design user-77=dancinggardener user-78=stagingerris user-79=ladburyp user-80=kategilpin user-81=havantho user-82=sketchy user-83=cath user-84=nvihkvu user-85=oubpgvbx user-86=tstardom user-87=what user-88=david user-89=careers user-90=nbhavers user-91=chrisdal user-92=mcdermos user-93=jennimil user-94=tomandle user-95=romaldki user-96=outdoorc user-97=hodgsonmail user-98=ranxterc user-99=branko user-100=onlycont user-101=lucy
Sep 22 15:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=attlebor user-103=nomistakes user-104=hidden user-105=barbersh user-106=tigerlet user-107=isleofwi user-108=smrszyqg user-109=lkpier user-110=firstre5 user-111=donnychicago user-112=steakbridieme user-113=ctedorgu user-114=philmcph user-115=nscdp user-116=leftie user-117=foods user-118=health2045 user-119=fortunaz user-120=eugincou user-121=courseme user-122=hirefootballgame user-123=cwsocial user-124=pugwash user-125=howardon user-126=paulmca1 user-127=cambria1 user-128=cathski user-129=reliable user-130=ninejimm user-131=steve user-132=bwppodcast user-133=zebrapho user-134=sibtoncc user-135=asandcoc user-136=dhyana user-137=beauty user-138=darkstar user-139=eatspam user-140=nsceres user-141=fawcettd user-142=burydropin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 15:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 15:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:49 nativespace-cdp sudo[967242]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:49 nativespace-cdp sudo[967254]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GQjvKSeVgR003jet.~
Sep 22 15:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:50 nativespace-cdp sudo[967261]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GQjvKSeVgR003jet.~'
Sep 22 15:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:50 nativespace-cdp sudo[967265]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GQjvKSeVgR003jet.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 15:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:50 nativespace-cdp sudo[967271]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 15:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:50 nativespace-cdp sudo[967276]: pam_unix(sudo:session): session closed for user root
Sep 22 15:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 15:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 15:09:59 nativespace-cdp sudo[967314]: pam_unix(sudo:session): session closed for user root
Sep 22 15:11:34 nativespace-cdp sshd[967805]: Connection closed by 159.100.136.21 port 38886 [preauth]
Sep 22 15:16:35 nativespace-cdp sshd[969180]: Connection closed by 159.100.136.21 port 47866 [preauth]
Sep 22 15:21:33 nativespace-cdp sshd[970367]: Connection closed by 159.100.136.21 port 56892 [preauth]
Sep 22 15:26:33 nativespace-cdp sshd[971540]: Connection closed by 159.100.136.21 port 38314 [preauth]
Sep 22 15:31:35 nativespace-cdp sshd[973049]: Connection closed by 159.100.136.21 port 47722 [preauth]
Sep 22 15:36:01 nativespace-cdp sshd[974134]: Invalid user mcserver from 91.213.99.45 port 46852
Sep 22 15:36:01 nativespace-cdp sshd[974134]: input_userauth_request: invalid user mcserver [preauth]
Sep 22 15:36:01 nativespace-cdp sshd[974134]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 15:36:01 nativespace-cdp sshd[974134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.213.99.45
Sep 22 15:36:03 nativespace-cdp sshd[974134]: Failed password for invalid user mcserver from 91.213.99.45 port 46852 ssh2
Sep 22 15:36:04 nativespace-cdp sshd[974134]: Received disconnect from 91.213.99.45 port 46852:11: Bye Bye [preauth]
Sep 22 15:36:04 nativespace-cdp sshd[974134]: Disconnected from 91.213.99.45 port 46852 [preauth]
Sep 22 15:36:34 nativespace-cdp sshd[974244]: Connection closed by 159.100.136.21 port 57360 [preauth]
Sep 22 15:37:09 nativespace-cdp sshd[974423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.25.22  user=root
Sep 22 15:37:09 nativespace-cdp sshd[974423]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 15:37:12 nativespace-cdp sshd[974423]: Failed password for root from 103.142.25.22 port 49164 ssh2
Sep 22 15:37:12 nativespace-cdp sshd[974423]: Received disconnect from 103.142.25.22 port 49164:11: Bye Bye [preauth]
Sep 22 15:37:12 nativespace-cdp sshd[974423]: Disconnected from 103.142.25.22 port 49164 [preauth]
Sep 22 15:39:33 nativespace-cdp sshd[974896]: Invalid user ionadmin from 170.83.79.29 port 55314
Sep 22 15:39:33 nativespace-cdp sshd[974896]: input_userauth_request: invalid user ionadmin [preauth]
Sep 22 15:39:33 nativespace-cdp sshd[974896]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 15:39:33 nativespace-cdp sshd[974896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.83.79.29
Sep 22 15:39:35 nativespace-cdp sshd[974896]: Failed password for invalid user ionadmin from 170.83.79.29 port 55314 ssh2
Sep 22 15:39:35 nativespace-cdp sshd[974896]: Received disconnect from 170.83.79.29 port 55314:11: Bye Bye [preauth]
Sep 22 15:39:35 nativespace-cdp sshd[974896]: Disconnected from 170.83.79.29 port 55314 [preauth]
Sep 22 15:41:34 nativespace-cdp sshd[975503]: Connection closed by 159.100.136.21 port 38070 [preauth]
Sep 22 15:42:32 nativespace-cdp sshd[975821]: Connection closed by 170.83.79.29 port 59388 [preauth]
Sep 22 15:42:43 nativespace-cdp sshd[975887]: Connection closed by 103.142.25.22 port 45270 [preauth]
Sep 22 15:43:16 nativespace-cdp sshd[976021]: Invalid user odoo from 170.83.79.29 port 55622
Sep 22 15:43:16 nativespace-cdp sshd[976021]: input_userauth_request: invalid user odoo [preauth]
Sep 22 15:43:16 nativespace-cdp sshd[976021]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 15:43:16 nativespace-cdp sshd[976021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.83.79.29
Sep 22 15:43:18 nativespace-cdp sshd[976021]: Failed password for invalid user odoo from 170.83.79.29 port 55622 ssh2
Sep 22 15:43:18 nativespace-cdp sshd[976021]: Received disconnect from 170.83.79.29 port 55622:11: Bye Bye [preauth]
Sep 22 15:43:18 nativespace-cdp sshd[976021]: Disconnected from 170.83.79.29 port 55622 [preauth]
Sep 22 15:43:56 nativespace-cdp sshd[976169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.213.99.45  user=root
Sep 22 15:43:56 nativespace-cdp sshd[976169]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 15:43:59 nativespace-cdp sshd[976169]: Failed password for root from 91.213.99.45 port 46406 ssh2
Sep 22 15:44:06 nativespace-cdp sshd[976282]: Invalid user postgres from 170.83.79.29 port 54014
Sep 22 15:44:06 nativespace-cdp sshd[976282]: input_userauth_request: invalid user postgres [preauth]
Sep 22 15:44:06 nativespace-cdp sshd[976282]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 15:44:06 nativespace-cdp sshd[976282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.83.79.29
Sep 22 15:44:07 nativespace-cdp sshd[976282]: Failed password for invalid user postgres from 170.83.79.29 port 54014 ssh2
Sep 22 15:44:08 nativespace-cdp sshd[976282]: Received disconnect from 170.83.79.29 port 54014:11: Bye Bye [preauth]
Sep 22 15:44:08 nativespace-cdp sshd[976282]: Disconnected from 170.83.79.29 port 54014 [preauth]
Sep 22 15:44:38 nativespace-cdp sshd[976403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.25.22  user=root
Sep 22 15:44:38 nativespace-cdp sshd[976403]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 15:44:40 nativespace-cdp sshd[976403]: Failed password for root from 103.142.25.22 port 46190 ssh2
Sep 22 15:44:40 nativespace-cdp sshd[976169]: Received disconnect from 91.213.99.45 port 46406:11: Bye Bye [preauth]
Sep 22 15:44:40 nativespace-cdp sshd[976169]: Disconnected from 91.213.99.45 port 46406 [preauth]
Sep 22 15:44:40 nativespace-cdp sshd[976403]: Received disconnect from 103.142.25.22 port 46190:11: Bye Bye [preauth]
Sep 22 15:44:40 nativespace-cdp sshd[976403]: Disconnected from 103.142.25.22 port 46190 [preauth]
Sep 22 15:44:54 nativespace-cdp sshd[976463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.213.99.45  user=root
Sep 22 15:44:54 nativespace-cdp sshd[976463]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 15:44:57 nativespace-cdp sshd[976463]: Failed password for root from 91.213.99.45 port 49184 ssh2
Sep 22 15:44:57 nativespace-cdp sshd[976463]: Received disconnect from 91.213.99.45 port 49184:11: Bye Bye [preauth]
Sep 22 15:44:57 nativespace-cdp sshd[976463]: Disconnected from 91.213.99.45 port 49184 [preauth]
Sep 22 15:45:33 nativespace-cdp sshd[976791]: Invalid user iptv from 103.142.25.22 port 60766
Sep 22 15:45:33 nativespace-cdp sshd[976791]: input_userauth_request: invalid user iptv [preauth]
Sep 22 15:45:33 nativespace-cdp sshd[976791]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 15:45:33 nativespace-cdp sshd[976791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.25.22
Sep 22 15:45:35 nativespace-cdp sshd[976818]: Invalid user ionguest from 170.83.79.28 port 32914
Sep 22 15:45:35 nativespace-cdp sshd[976818]: input_userauth_request: invalid user ionguest [preauth]
Sep 22 15:45:35 nativespace-cdp sshd[976818]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 15:45:35 nativespace-cdp sshd[976818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.83.79.28
Sep 22 15:45:35 nativespace-cdp sshd[976791]: Failed password for invalid user iptv from 103.142.25.22 port 60766 ssh2
Sep 22 15:45:36 nativespace-cdp sshd[976818]: Failed password for invalid user ionguest from 170.83.79.28 port 32914 ssh2
Sep 22 15:45:36 nativespace-cdp sshd[976818]: Received disconnect from 170.83.79.28 port 32914:11: Bye Bye [preauth]
Sep 22 15:45:36 nativespace-cdp sshd[976818]: Disconnected from 170.83.79.28 port 32914 [preauth]
Sep 22 15:46:33 nativespace-cdp sshd[977077]: Connection closed by 159.100.136.21 port 47010 [preauth]
Sep 22 15:51:33 nativespace-cdp sshd[978154]: Connection closed by 159.100.136.21 port 56198 [preauth]
Sep 22 15:56:00 nativespace-cdp sshd[979147]: Invalid user mcserver from 170.83.79.31 port 41712
Sep 22 15:56:00 nativespace-cdp sshd[979147]: input_userauth_request: invalid user mcserver [preauth]
Sep 22 15:56:00 nativespace-cdp sshd[979147]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 15:56:00 nativespace-cdp sshd[979147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.83.79.31
Sep 22 15:56:02 nativespace-cdp sshd[979147]: Failed password for invalid user mcserver from 170.83.79.31 port 41712 ssh2
Sep 22 15:56:05 nativespace-cdp sshd[979147]: Received disconnect from 170.83.79.31 port 41712:11: Bye Bye [preauth]
Sep 22 15:56:05 nativespace-cdp sshd[979147]: Disconnected from 170.83.79.31 port 41712 [preauth]
Sep 22 15:56:33 nativespace-cdp sshd[979248]: Connection closed by 159.100.136.21 port 37700 [preauth]
Sep 22 16:01:33 nativespace-cdp sshd[980773]: Connection closed by 159.100.136.21 port 46862 [preauth]
Sep 22 16:06:33 nativespace-cdp sshd[982147]: Connection closed by 159.100.136.21 port 56424 [preauth]
Sep 22 16:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 16:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:44 nativespace-cdp sudo[982895]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 16:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:44 nativespace-cdp sudo[982901]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 16:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:46 nativespace-cdp sudo[982906]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 16:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:46 nativespace-cdp sudo[982924]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 16:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:49 nativespace-cdp sudo[982930]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 16:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:50 nativespace-cdp sudo[982942]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 16:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:50 nativespace-cdp sudo[982948]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 16:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:50 nativespace-cdp sudo[982952]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 16:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:50 nativespace-cdp sudo[982958]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 16:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:50 nativespace-cdp sudo[982963]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 16:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:50 nativespace-cdp sudo[982969]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:58 nativespace-cdp sudo[982999]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 16:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:09:59 nativespace-cdp sudo[983005]: pam_unix(sudo:session): session closed for user root
Sep 22 16:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ptkxhsbt user-2=dickemery123 user-3=martsblo user-4=magichat user-5=lbhyisi user-6=hhdugcor user-7=sarafoundation user-8=atestord user-9=strathar user-10=lakesan1 user-11=brmrjxl user-12=musorguk user-13=megacards user-14=wilsonsw user-15=hodgesonweb user-16=theblack user-17=spectrum user-18=jarvisin user-19=leereyn1 user-20=stephani user-21=still user-22=agproduc user-23=maflemin user-24=lbscrmod user-25=athenare user-26=connect9 user-27=vantagep user-28=foundation user-29=booff user-30=markward user-31=ulsukarm user-32=skyfirec user-33=alexadmin user-34=nativene user-35=stuartge user-36=askhform user-37=innovat1 user-38=battlere user-39=oneoarco user-40=firstre2 user-41=vivienn1 user-42=brighto1 user-43=nstriton user-44=bemadonn user-45=ggaaorgu user-46=belle user-47=newstoda user-48=bedfords
Sep 22 16:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=carsinyo user-50=fetch user-51=hubmaster user-52=elecleis user-53=gilpin user-54=milloyco user-55=thqkgnbz user-56=connectedshoppin user-57=ianrayne user-58=accooper user-59=opaiscyx user-60=coursemc user-61=firstres user-62=seftvta user-63=jonhartl user-64=ultbcrra user-65=southlon user-66=highlegh user-67=firstred user-68=costestimatorco user-69=clarkass user-70=firstrel user-71=paulmca1 user-72=howardon user-73=pugwash user-74=cwsocial user-75=ninejimm user-76=reliable user-77=cambria1 user-78=cathski user-79=courseme user-80=eugincou user-81=hirefootballgame user-82=philmcph user-83=ctedorgu user-84=firstre5 user-85=steakbridieme user-86=donnychicago user-87=lkpier user-88=health2045 user-89=fortunaz user-90=leftie user-91=foods user-92=nscdp user-93=barbersh user-94=tigerlet user-95=hidden user-96=nomistakes user-97=smrszyqg user-98=isleofwi user-99=nsceres user-100=burydropin user-101=fawcettd
Sep 22 16:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=eatspam user-104=darkstar user-105=beauty user-106=asandcoc user-107=sibtoncc user-108=steve user-109=zebrapho user-110=bwppodcast user-111=nvihkvu user-112=sketchy user-113=cath user-114=havantho user-115=what user-116=oubpgvbx user-117=tstardom user-118=design user-119=kategilpin user-120=ladburyp user-121=stagingerris user-122=dancinggardener user-123=boldover user-124=nove user-125=sosevalu user-126=crrtipdl user-127=bakery user-128=onlycont user-129=attlebor user-130=lucy user-131=romaldki user-132=branko user-133=outdoorc user-134=hodgsonmail user-135=ranxterc user-136=jennimil user-137=tomandle user-138=careers user-139=nbhavers user-140=david user-141=mcdermos user-142=chrisdal feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 16:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 16:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:10:00 nativespace-cdp sudo[983014]: pam_unix(sudo:session): session closed for user root
Sep 22 16:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 16:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:10:01 nativespace-cdp sudo[983048]: pam_unix(sudo:session): session closed for user root
Sep 22 16:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8Agb8K5euQMyw5PM.~
Sep 22 16:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:10:01 nativespace-cdp sudo[983109]: pam_unix(sudo:session): session closed for user root
Sep 22 16:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8Agb8K5euQMyw5PM.~'
Sep 22 16:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:10:01 nativespace-cdp sudo[983115]: pam_unix(sudo:session): session closed for user root
Sep 22 16:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8Agb8K5euQMyw5PM.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 16:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:10:01 nativespace-cdp sudo[983119]: pam_unix(sudo:session): session closed for user root
Sep 22 16:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 16:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:10:01 nativespace-cdp sudo[983124]: pam_unix(sudo:session): session closed for user root
Sep 22 16:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 16:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 16:10:04 nativespace-cdp sudo[983189]: pam_unix(sudo:session): session closed for user root
Sep 22 16:11:34 nativespace-cdp sshd[983544]: Connection closed by 159.100.136.21 port 36824 [preauth]
Sep 22 16:16:36 nativespace-cdp sshd[984992]: Connection closed by 159.100.136.21 port 46298 [preauth]
Sep 22 16:21:33 nativespace-cdp sshd[986264]: Connection closed by 159.100.136.21 port 55318 [preauth]
Sep 22 16:26:33 nativespace-cdp sshd[987417]: Connection closed by 159.100.136.21 port 36074 [preauth]
Sep 22 16:31:36 nativespace-cdp sshd[988894]: Connection closed by 159.100.136.21 port 44474 [preauth]
Sep 22 16:36:33 nativespace-cdp sshd[990257]: Connection closed by 159.100.136.21 port 53738 [preauth]
Sep 22 16:41:36 nativespace-cdp sshd[991641]: Connection closed by 159.100.136.21 port 34492 [preauth]
Sep 22 16:46:36 nativespace-cdp sshd[993090]: Connection closed by 159.100.136.21 port 42990 [preauth]
Sep 22 16:51:34 nativespace-cdp sshd[994367]: Connection closed by 159.100.136.21 port 52190 [preauth]
Sep 22 16:56:33 nativespace-cdp sshd[995583]: Connection closed by 159.100.136.21 port 33384 [preauth]
Sep 22 17:01:33 nativespace-cdp sshd[997061]: Connection closed by 159.100.136.21 port 41870 [preauth]
Sep 22 17:06:33 nativespace-cdp sshd[998344]: Connection closed by 159.100.136.21 port 51016 [preauth]
Sep 22 17:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 17:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:09:38 nativespace-cdp sudo[999040]: pam_unix(sudo:session): session closed for user root
Sep 22 17:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 17:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:09:38 nativespace-cdp sudo[999044]: pam_unix(sudo:session): session closed for user root
Sep 22 17:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 17:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:09:39 nativespace-cdp sudo[999049]: pam_unix(sudo:session): session closed for user root
Sep 22 17:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 17:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:09:39 nativespace-cdp sudo[999056]: pam_unix(sudo:session): session closed for user root
Sep 22 17:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 17:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:06 nativespace-cdp sudo[999062]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:06 nativespace-cdp sudo[999263]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:06 nativespace-cdp sudo[999266]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:06 nativespace-cdp sudo[999269]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:06 nativespace-cdp sudo[999272]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:06 nativespace-cdp sudo[999276]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:06 nativespace-cdp sudo[999279]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:10 nativespace-cdp sudo[999296]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:10 nativespace-cdp sudo[999301]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=attlebor user-2=lucy user-3=onlycont user-4=branko user-5=ranxterc user-6=hodgsonmail user-7=outdoorc user-8=romaldki user-9=tomandle user-10=jennimil user-11=mcdermos user-12=chrisdal user-13=nbhavers user-14=careers user-15=david user-16=what user-17=oubpgvbx user-18=tstardom user-19=nvihkvu user-20=sketchy user-21=cath user-22=havantho user-23=kategilpin user-24=ladburyp user-25=dancinggardener user-26=stagingerris user-27=design user-28=nove user-29=boldover user-30=sosevalu user-31=crrtipdl user-32=bakery user-33=burydropin user-34=fawcettd user-35=nsceres user-36=eatspam user-37=darkstar user-38=beauty user-39=dhyana user-40=sibtoncc user-41=asandcoc user-42=zebrapho user-43=bwppodcast user-44=steve user-45=reliable user-46=ninejimm user-47=cambria1 user-48=cathski user-49=pugwash
Sep 22 17:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=howardon user-51=paulmca1 user-52=cwsocial user-53=hirefootballgame user-54=courseme user-55=eugincou user-56=health2045 user-57=fortunaz user-58=foods user-59=leftie user-60=nscdp user-61=ctedorgu user-62=philmcph user-63=steakbridieme user-64=firstre5 user-65=donnychicago user-66=lkpier user-67=smrszyqg user-68=isleofwi user-69=tigerlet user-70=barbersh user-71=hidden user-72=nomistakes user-73=elecleis user-74=milloyco user-75=gilpin user-76=carsinyo user-77=fetch user-78=hubmaster user-79=ianrayne user-80=accooper user-81=thqkgnbz user-82=connectedshoppin user-83=firstres user-84=seftvta user-85=jonhartl user-86=ultbcrra user-87=opaiscyx user-88=coursemc user-89=costestimatorco user-90=clarkass user-91=firstrel user-92=southlon user-93=highlegh user-94=firstred user-95=skyfirec user-96=alexadmin user-97=askhform user-98=stuartge user-99=innovat1 user-100=nativene user-101=brighto1 user-102=nstriton
Sep 22 17:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=battlere user-104=oneoarco user-105=firstre2 user-106=vivienn1 user-107=bedfords user-108=bemadonn user-109=ggaaorgu user-110=belle user-111=newstoda user-112=jarvisin user-113=theblack user-114=hodgesonweb user-115=spectrum user-116=still user-117=agproduc user-118=leereyn1 user-119=stephani user-120=booff user-121=markward user-122=foundation user-123=maflemin user-124=lbscrmod user-125=athenare user-126=connect9 user-127=vantagep user-128=ulsukarm user-129=martsblo user-130=ptkxhsbt user-131=dickemery123 user-132=lbhyisi user-133=hhdugcor user-134=magichat user-135=brmrjxl user-136=lakesan1 user-137=sarafoundation user-138=atestord user-139=strathar user-140=wilsonsw user-141=musorguk user-142=megacards feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 17:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:11 nativespace-cdp sudo[999345]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:11 nativespace-cdp sudo[999363]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NWBMKjOEBGCgdqn3.~
Sep 22 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:11 nativespace-cdp sudo[999367]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NWBMKjOEBGCgdqn3.~'
Sep 22 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:11 nativespace-cdp sudo[999370]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NWBMKjOEBGCgdqn3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:11 nativespace-cdp sudo[999374]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:11 nativespace-cdp sudo[999377]: pam_unix(sudo:session): session closed for user root
Sep 22 17:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 17:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 17:10:18 nativespace-cdp sudo[999419]: pam_unix(sudo:session): session closed for user root
Sep 22 17:11:33 nativespace-cdp sshd[999699]: Connection closed by 159.100.136.21 port 59930 [preauth]
Sep 22 17:16:33 nativespace-cdp sshd[1001066]: Connection closed by 159.100.136.21 port 41110 [preauth]
Sep 22 17:21:33 nativespace-cdp sshd[1002280]: Connection closed by 159.100.136.21 port 50162 [preauth]
Sep 22 17:26:33 nativespace-cdp sshd[1003523]: Connection closed by 159.100.136.21 port 59756 [preauth]
Sep 22 17:31:33 nativespace-cdp sshd[1005015]: Connection closed by 159.100.136.21 port 41054 [preauth]
Sep 22 17:36:33 nativespace-cdp sshd[1006159]: Connection closed by 159.100.136.21 port 50482 [preauth]
Sep 22 17:41:33 nativespace-cdp sshd[1007320]: Connection closed by 159.100.136.21 port 59936 [preauth]
Sep 22 17:46:34 nativespace-cdp sshd[1008918]: Connection closed by 159.100.136.21 port 41232 [preauth]
Sep 22 17:51:33 nativespace-cdp sshd[1010270]: Connection closed by 159.100.136.21 port 50056 [preauth]
Sep 22 17:52:53 nativespace-cdp sshd[1010641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.75.6.242  user=root
Sep 22 17:52:53 nativespace-cdp sshd[1010641]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 17:52:54 nativespace-cdp sshd[1010641]: Failed password for root from 177.75.6.242 port 54002 ssh2
Sep 22 17:52:54 nativespace-cdp sshd[1010641]: Received disconnect from 177.75.6.242 port 54002:11: Bye Bye [preauth]
Sep 22 17:52:54 nativespace-cdp sshd[1010641]: Disconnected from 177.75.6.242 port 54002 [preauth]
Sep 22 17:54:58 nativespace-cdp sshd[1011054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.75.6.242  user=root
Sep 22 17:54:58 nativespace-cdp sshd[1011054]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 17:55:01 nativespace-cdp sshd[1011054]: Failed password for root from 177.75.6.242 port 32409 ssh2
Sep 22 17:55:03 nativespace-cdp sshd[1011054]: Received disconnect from 177.75.6.242 port 32409:11: Bye Bye [preauth]
Sep 22 17:55:03 nativespace-cdp sshd[1011054]: Disconnected from 177.75.6.242 port 32409 [preauth]
Sep 22 17:55:50 nativespace-cdp sshd[1011340]: Invalid user bkp from 177.75.6.242 port 7450
Sep 22 17:55:50 nativespace-cdp sshd[1011340]: input_userauth_request: invalid user bkp [preauth]
Sep 22 17:55:50 nativespace-cdp sshd[1011340]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 17:55:50 nativespace-cdp sshd[1011340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.75.6.242
Sep 22 17:55:50 nativespace-cdp sshd[1011342]: Invalid user debianuser from 89.116.134.223 port 37912
Sep 22 17:55:50 nativespace-cdp sshd[1011342]: input_userauth_request: invalid user debianuser [preauth]
Sep 22 17:55:50 nativespace-cdp sshd[1011342]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 17:55:50 nativespace-cdp sshd[1011342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.116.134.223
Sep 22 17:55:52 nativespace-cdp sshd[1011340]: Failed password for invalid user bkp from 177.75.6.242 port 7450 ssh2
Sep 22 17:55:52 nativespace-cdp sshd[1011342]: Failed password for invalid user debianuser from 89.116.134.223 port 37912 ssh2
Sep 22 17:55:53 nativespace-cdp sshd[1011340]: Received disconnect from 177.75.6.242 port 7450:11: Bye Bye [preauth]
Sep 22 17:55:53 nativespace-cdp sshd[1011340]: Disconnected from 177.75.6.242 port 7450 [preauth]
Sep 22 17:55:53 nativespace-cdp sshd[1011342]: Received disconnect from 89.116.134.223 port 37912:11: Bye Bye [preauth]
Sep 22 17:55:53 nativespace-cdp sshd[1011342]: Disconnected from 89.116.134.223 port 37912 [preauth]
Sep 22 17:56:33 nativespace-cdp sshd[1011546]: Connection closed by 159.100.136.21 port 59400 [preauth]
Sep 22 18:01:33 nativespace-cdp sshd[1013085]: Connection closed by 159.100.136.21 port 40482 [preauth]
Sep 22 18:06:04 nativespace-cdp sshd[1014231]: Invalid user admin from 47.76.71.34 port 60430
Sep 22 18:06:04 nativespace-cdp sshd[1014231]: input_userauth_request: invalid user admin [preauth]
Sep 22 18:06:04 nativespace-cdp sshd[1014231]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 18:06:04 nativespace-cdp sshd[1014231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.76.71.34
Sep 22 18:06:06 nativespace-cdp sshd[1014231]: Failed password for invalid user admin from 47.76.71.34 port 60430 ssh2
Sep 22 18:06:10 nativespace-cdp sshd[1014231]: Received disconnect from 47.76.71.34 port 60430:11: Bye Bye [preauth]
Sep 22 18:06:10 nativespace-cdp sshd[1014231]: Disconnected from 47.76.71.34 port 60430 [preauth]
Sep 22 18:06:33 nativespace-cdp sshd[1014330]: Connection closed by 159.100.136.21 port 49478 [preauth]
Sep 22 18:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 18:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:40 nativespace-cdp sudo[1015009]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 18:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:40 nativespace-cdp sudo[1015013]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 18:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:41 nativespace-cdp sudo[1015018]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 18:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:41 nativespace-cdp sudo[1015028]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 18:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:44 nativespace-cdp sudo[1015034]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 18:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:45 nativespace-cdp sudo[1015052]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 18:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:45 nativespace-cdp sudo[1015063]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 18:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:45 nativespace-cdp sudo[1015067]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 18:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:45 nativespace-cdp sudo[1015072]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 18:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:45 nativespace-cdp sudo[1015077]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 18:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:45 nativespace-cdp sudo[1015083]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:54 nativespace-cdp sudo[1015109]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 18:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:55 nativespace-cdp sudo[1015118]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=kategilpin user-2=stagingerris user-3=dancinggardener user-4=ladburyp user-5=design user-6=what user-7=tstardom user-8=oubpgvbx user-9=nvihkvu user-10=havantho user-11=sketchy user-12=cath user-13=crrtipdl user-14=sosevalu user-15=bakery user-16=nove user-17=boldover user-18=branko user-19=hodgsonmail user-20=ranxterc user-21=outdoorc user-22=romaldki user-23=lucy user-24=attlebor user-25=onlycont user-26=mcdermos user-27=chrisdal user-28=david user-29=nbhavers user-30=careers user-31=tomandle user-32=jennimil user-33=hirefootballgame user-34=courseme user-35=eugincou user-36=ninejimm user-37=reliable user-38=cambria1 user-39=cathski user-40=cwsocial user-41=paulmca1 user-42=howardon user-43=pugwash user-44=smrszyqg user-45=isleofwi user-46=barbersh user-47=tigerlet user-48=nomistakes
Sep 22 18:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=hidden user-50=foods user-51=leftie user-52=health2045 user-53=fortunaz user-54=nscdp user-55=firstre5 user-56=donnychicago user-57=steakbridieme user-58=ctedorgu user-59=philmcph user-60=lkpier user-61=darkstar user-62=eatspam user-63=beauty user-64=dhyana user-65=fawcettd user-66=burydropin user-67=nsceres user-68=zebrapho user-69=bwppodcast user-70=steve user-71=sibtoncc user-72=asandcoc user-73=stuartge user-74=askhform user-75=innovat1 user-76=nativene user-77=skyfirec user-78=alexadmin user-79=bedfords user-80=bemadonn user-81=newstoda user-82=belle user-83=ggaaorgu user-84=nstriton user-85=brighto1 user-86=oneoarco user-87=battlere user-88=vivienn1 user-89=firstre2 user-90=ianrayne user-91=accooper user-92=thqkgnbz user-93=connectedshoppin user-94=elecleis user-95=gilpin user-96=milloyco user-97=fetch user-98=carsinyo user-99=hubmaster user-100=costestimatorco user-101=firstrel user-102=clarkass
Sep 22 18:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=highlegh user-104=southlon user-105=firstred user-106=firstres user-107=ultbcrra user-108=seftvta user-109=jonhartl user-110=coursemc user-111=opaiscyx user-112=hhdugcor user-113=lbhyisi user-114=magichat user-115=martsblo user-116=ptkxhsbt user-117=dickemery123 user-118=wilsonsw user-119=megacards user-120=musorguk user-121=brmrjxl user-122=lakesan1 user-123=atestord user-124=sarafoundation user-125=strathar user-126=agproduc user-127=still user-128=leereyn1 user-129=stephani user-130=jarvisin user-131=hodgesonweb user-132=theblack user-133=spectrum user-134=ulsukarm user-135=foundation user-136=booff user-137=markward user-138=lbscrmod user-139=maflemin user-140=vantagep user-141=connect9 user-142=athenare feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 18:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 18:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:56 nativespace-cdp sudo[1015125]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 18:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:56 nativespace-cdp sudo[1015134]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5LTMAVAIAgI9p8sw.~
Sep 22 18:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:56 nativespace-cdp sudo[1015139]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5LTMAVAIAgI9p8sw.~'
Sep 22 18:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:56 nativespace-cdp sudo[1015143]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5LTMAVAIAgI9p8sw.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 18:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:56 nativespace-cdp sudo[1015150]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 18:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:56 nativespace-cdp sudo[1015154]: pam_unix(sudo:session): session closed for user root
Sep 22 18:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 18:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 18:09:58 nativespace-cdp sudo[1015175]: pam_unix(sudo:session): session closed for user root
Sep 22 18:10:31 nativespace-cdp sshd[1015382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.66.209  user=david
Sep 22 18:10:33 nativespace-cdp sshd[1015382]: Failed password for david from 45.55.66.209 port 53806 ssh2
Sep 22 18:10:33 nativespace-cdp sshd[1015382]: Received disconnect from 45.55.66.209 port 53806:11: Bye Bye [preauth]
Sep 22 18:10:33 nativespace-cdp sshd[1015382]: Disconnected from 45.55.66.209 port 53806 [preauth]
Sep 22 18:11:18 nativespace-cdp sshd[1015556]: Invalid user admin from 45.55.66.209 port 60152
Sep 22 18:11:18 nativespace-cdp sshd[1015556]: input_userauth_request: invalid user admin [preauth]
Sep 22 18:11:18 nativespace-cdp sshd[1015556]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 18:11:18 nativespace-cdp sshd[1015556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.66.209
Sep 22 18:11:20 nativespace-cdp sshd[1015556]: Failed password for invalid user admin from 45.55.66.209 port 60152 ssh2
Sep 22 18:11:20 nativespace-cdp sshd[1015556]: Received disconnect from 45.55.66.209 port 60152:11: Bye Bye [preauth]
Sep 22 18:11:20 nativespace-cdp sshd[1015556]: Disconnected from 45.55.66.209 port 60152 [preauth]
Sep 22 18:11:33 nativespace-cdp sshd[1015597]: Connection closed by 159.100.136.21 port 58424 [preauth]
Sep 22 18:11:57 nativespace-cdp sshd[1015658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.66.209  user=root
Sep 22 18:11:57 nativespace-cdp sshd[1015658]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 18:11:59 nativespace-cdp sshd[1015658]: Failed password for root from 45.55.66.209 port 41692 ssh2
Sep 22 18:11:59 nativespace-cdp sshd[1015658]: Received disconnect from 45.55.66.209 port 41692:11: Bye Bye [preauth]
Sep 22 18:11:59 nativespace-cdp sshd[1015658]: Disconnected from 45.55.66.209 port 41692 [preauth]
Sep 22 18:12:25 nativespace-cdp sshd[1015769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.76.71.34  user=root
Sep 22 18:12:25 nativespace-cdp sshd[1015769]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 18:12:27 nativespace-cdp sshd[1015769]: Failed password for root from 47.76.71.34 port 57380 ssh2
Sep 22 18:12:31 nativespace-cdp sshd[1015769]: Received disconnect from 47.76.71.34 port 57380:11: Bye Bye [preauth]
Sep 22 18:12:31 nativespace-cdp sshd[1015769]: Disconnected from 47.76.71.34 port 57380 [preauth]
Sep 22 18:12:34 nativespace-cdp sshd[1015798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.22.87.159  user=root
Sep 22 18:12:34 nativespace-cdp sshd[1015798]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 18:12:36 nativespace-cdp sshd[1015798]: Failed password for root from 149.22.87.159 port 46260 ssh2
Sep 22 18:12:36 nativespace-cdp sshd[1015798]: Received disconnect from 149.22.87.159 port 46260:11: Bye Bye [preauth]
Sep 22 18:12:36 nativespace-cdp sshd[1015798]: Disconnected from 149.22.87.159 port 46260 [preauth]
Sep 22 18:12:48 nativespace-cdp sshd[1015919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.76.71.34  user=root
Sep 22 18:12:48 nativespace-cdp sshd[1015919]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 18:12:49 nativespace-cdp sshd[1015919]: Failed password for root from 47.76.71.34 port 37212 ssh2
Sep 22 18:12:50 nativespace-cdp sshd[1015919]: Received disconnect from 47.76.71.34 port 37212:11: Bye Bye [preauth]
Sep 22 18:12:50 nativespace-cdp sshd[1015919]: Disconnected from 47.76.71.34 port 37212 [preauth]
Sep 22 18:14:37 nativespace-cdp sshd[1016325]: Invalid user admin from 149.22.87.159 port 52568
Sep 22 18:14:37 nativespace-cdp sshd[1016325]: input_userauth_request: invalid user admin [preauth]
Sep 22 18:14:37 nativespace-cdp sshd[1016325]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 18:14:37 nativespace-cdp sshd[1016325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.22.87.159
Sep 22 18:14:39 nativespace-cdp sshd[1016325]: Failed password for invalid user admin from 149.22.87.159 port 52568 ssh2
Sep 22 18:14:40 nativespace-cdp sshd[1016325]: Received disconnect from 149.22.87.159 port 52568:11: Bye Bye [preauth]
Sep 22 18:14:40 nativespace-cdp sshd[1016325]: Disconnected from 149.22.87.159 port 52568 [preauth]
Sep 22 18:15:18 nativespace-cdp sshd[1016663]: Invalid user administrator from 149.22.87.159 port 52980
Sep 22 18:15:18 nativespace-cdp sshd[1016663]: input_userauth_request: invalid user administrator [preauth]
Sep 22 18:15:18 nativespace-cdp sshd[1016663]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 18:15:18 nativespace-cdp sshd[1016663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.22.87.159
Sep 22 18:15:20 nativespace-cdp sshd[1016663]: Failed password for invalid user administrator from 149.22.87.159 port 52980 ssh2
Sep 22 18:15:22 nativespace-cdp sshd[1016663]: Received disconnect from 149.22.87.159 port 52980:11: Bye Bye [preauth]
Sep 22 18:15:22 nativespace-cdp sshd[1016663]: Disconnected from 149.22.87.159 port 52980 [preauth]
Sep 22 18:16:33 nativespace-cdp sshd[1016957]: Connection closed by 159.100.136.21 port 39722 [preauth]
Sep 22 18:21:34 nativespace-cdp sshd[1018124]: Connection closed by 159.100.136.21 port 48680 [preauth]
Sep 22 18:26:33 nativespace-cdp sshd[1019287]: Connection closed by 159.100.136.21 port 58250 [preauth]
Sep 22 18:30:45 nativespace-cdp sshd[1020567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.22.87.22  user=root
Sep 22 18:30:45 nativespace-cdp sshd[1020567]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 18:30:48 nativespace-cdp sshd[1020567]: Failed password for root from 149.22.87.22 port 36082 ssh2
Sep 22 18:30:48 nativespace-cdp sshd[1020567]: Received disconnect from 149.22.87.22 port 36082:11: Bye Bye [preauth]
Sep 22 18:30:48 nativespace-cdp sshd[1020567]: Disconnected from 149.22.87.22 port 36082 [preauth]
Sep 22 18:31:24 nativespace-cdp sshd[1020692]: Invalid user admin from 149.22.87.22 port 39210
Sep 22 18:31:24 nativespace-cdp sshd[1020692]: input_userauth_request: invalid user admin [preauth]
Sep 22 18:31:24 nativespace-cdp sshd[1020692]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 18:31:24 nativespace-cdp sshd[1020692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.22.87.22
Sep 22 18:31:26 nativespace-cdp sshd[1020692]: Failed password for invalid user admin from 149.22.87.22 port 39210 ssh2
Sep 22 18:31:34 nativespace-cdp sshd[1020725]: Connection closed by 159.100.136.21 port 38832 [preauth]
Sep 22 18:31:37 nativespace-cdp sshd[1020692]: Received disconnect from 149.22.87.22 port 39210:11: Bye Bye [preauth]
Sep 22 18:31:37 nativespace-cdp sshd[1020692]: Disconnected from 149.22.87.22 port 39210 [preauth]
Sep 22 18:32:10 nativespace-cdp sshd[1020845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.22.87.22  user=root
Sep 22 18:32:10 nativespace-cdp sshd[1020845]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 18:32:11 nativespace-cdp sshd[1020845]: Failed password for root from 149.22.87.22 port 58976 ssh2
Sep 22 18:32:12 nativespace-cdp sshd[1020845]: Received disconnect from 149.22.87.22 port 58976:11: Bye Bye [preauth]
Sep 22 18:32:12 nativespace-cdp sshd[1020845]: Disconnected from 149.22.87.22 port 58976 [preauth]
Sep 22 18:36:33 nativespace-cdp sshd[1021981]: Connection closed by 159.100.136.21 port 48638 [preauth]
Sep 22 18:41:34 nativespace-cdp sshd[1023157]: Connection closed by 159.100.136.21 port 58094 [preauth]
Sep 22 18:46:34 nativespace-cdp sshd[1024510]: Connection closed by 159.100.136.21 port 39694 [preauth]
Sep 22 18:51:35 nativespace-cdp sshd[1025644]: Connection closed by 159.100.136.21 port 49350 [preauth]
Sep 22 18:56:35 nativespace-cdp sshd[1026787]: Connection closed by 159.100.136.21 port 59106 [preauth]
Sep 22 19:01:33 nativespace-cdp sshd[1028182]: Connection closed by 159.100.136.21 port 39756 [preauth]
Sep 22 19:06:33 nativespace-cdp sshd[1029322]: Connection closed by 159.100.136.21 port 47978 [preauth]
Sep 22 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:38 nativespace-cdp sudo[1030009]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:38 nativespace-cdp sudo[1030014]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:39 nativespace-cdp sudo[1030019]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 19:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:39 nativespace-cdp sudo[1030036]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 19:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:41 nativespace-cdp sudo[1030042]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:41 nativespace-cdp sudo[1030052]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:41 nativespace-cdp sudo[1030057]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:41 nativespace-cdp sudo[1030061]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:41 nativespace-cdp sudo[1030066]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:41 nativespace-cdp sudo[1030071]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:41 nativespace-cdp sudo[1030078]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:49 nativespace-cdp sudo[1030108]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:49 nativespace-cdp sudo[1030114]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nativene user-2=innovat1 user-3=stuartge user-4=askhform user-5=skyfirec user-6=alexadmin user-7=ggaaorgu user-8=belle user-9=newstoda user-10=bemadonn user-11=bedfords user-12=firstre2 user-13=vivienn1 user-14=battlere user-15=oneoarco user-16=brighto1 user-17=nstriton user-18=connectedshoppin user-19=thqkgnbz user-20=accooper user-21=ianrayne user-22=hubmaster user-23=carsinyo user-24=fetch user-25=gilpin user-26=milloyco user-27=elecleis user-28=firstred user-29=southlon user-30=highlegh user-31=firstrel user-32=clarkass user-33=costestimatorco user-34=opaiscyx user-35=coursemc user-36=seftvta user-37=jonhartl user-38=ultbcrra user-39=firstres user-40=magichat user-41=lbhyisi user-42=hhdugcor user-43=dickemery123 user-44=ptkxhsbt user-45=martsblo user-46=musorguk user-47=megacards
Sep 22 19:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=wilsonsw user-49=strathar user-50=sarafoundation user-51=atestord user-52=lakesan1 user-53=brmrjxl user-54=stephani user-55=leereyn1 user-56=still user-57=agproduc user-58=spectrum user-59=theblack user-60=hodgesonweb user-61=jarvisin user-62=ulsukarm user-63=connect9 user-64=athenare user-65=vantagep user-66=maflemin user-67=lbscrmod user-68=booff user-69=foundation user-70=markward user-71=design user-72=ladburyp user-73=dancinggardener user-74=stagingerris user-75=kategilpin user-76=sketchy user-77=cath user-78=havantho user-79=nvihkvu user-80=oubpgvbx user-81=tstardom user-82=what user-83=bakery user-84=sosevalu user-85=crrtipdl user-86=boldover user-87=nove user-88=romaldki user-89=outdoorc user-90=hodgsonmail user-91=ranxterc user-92=branko user-93=onlycont user-94=attlebor user-95=lucy user-96=nbhavers user-97=careers user-98=david user-99=chrisdal user-100=mcdermos user-101=jennimil
Sep 22 19:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=tomandle user-103=eugincou user-104=courseme user-105=hirefootballgame user-106=paulmca1 user-107=howardon user-108=pugwash user-109=cwsocial user-110=cathski user-111=cambria1 user-112=reliable user-113=ninejimm user-114=hidden user-115=nomistakes user-116=barbersh user-117=tigerlet user-118=smrszyqg user-119=isleofwi user-120=lkpier user-121=philmcph user-122=ctedorgu user-123=firstre5 user-124=steakbridieme user-125=donnychicago user-126=nscdp user-127=health2045 user-128=fortunaz user-129=leftie user-130=foods user-131=dhyana user-132=beauty user-133=eatspam user-134=darkstar user-135=nsceres user-136=burydropin user-137=fawcettd user-138=steve user-139=bwppodcast user-140=zebrapho user-141=sibtoncc user-142=asandcoc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 19:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:50 nativespace-cdp sudo[1030125]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:50 nativespace-cdp sudo[1030132]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-t69typ1nnoY5XDgF.~
Sep 22 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:50 nativespace-cdp sudo[1030137]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-t69typ1nnoY5XDgF.~'
Sep 22 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:50 nativespace-cdp sudo[1030141]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-t69typ1nnoY5XDgF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:50 nativespace-cdp sudo[1030147]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:50 nativespace-cdp sudo[1030152]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 19:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 19:09:57 nativespace-cdp sudo[1030184]: pam_unix(sudo:session): session closed for user root
Sep 22 19:09:59 nativespace-cdp sshd[1030192]: Invalid user cacti from 62.36.40.105 port 15000
Sep 22 19:09:59 nativespace-cdp sshd[1030192]: input_userauth_request: invalid user cacti [preauth]
Sep 22 19:09:59 nativespace-cdp sshd[1030192]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 19:09:59 nativespace-cdp sshd[1030192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.36.40.105
Sep 22 19:10:01 nativespace-cdp sshd[1030192]: Failed password for invalid user cacti from 62.36.40.105 port 15000 ssh2
Sep 22 19:10:01 nativespace-cdp sshd[1030192]: Received disconnect from 62.36.40.105 port 15000:11: Bye Bye [preauth]
Sep 22 19:10:01 nativespace-cdp sshd[1030192]: Disconnected from 62.36.40.105 port 15000 [preauth]
Sep 22 19:11:33 nativespace-cdp sshd[1030643]: Connection closed by 159.100.136.21 port 57160 [preauth]
Sep 22 19:11:36 nativespace-cdp sshd[1030657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.103.33.131  user=root
Sep 22 19:11:36 nativespace-cdp sshd[1030657]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 19:11:38 nativespace-cdp sshd[1030657]: Failed password for root from 171.103.33.131 port 35562 ssh2
Sep 22 19:11:38 nativespace-cdp sshd[1030657]: Received disconnect from 171.103.33.131 port 35562:11: Bye Bye [preauth]
Sep 22 19:11:38 nativespace-cdp sshd[1030657]: Disconnected from 171.103.33.131 port 35562 [preauth]
Sep 22 19:12:55 nativespace-cdp sshd[1030905]: Invalid user bkp from 47.236.24.128 port 52794
Sep 22 19:12:55 nativespace-cdp sshd[1030905]: input_userauth_request: invalid user bkp [preauth]
Sep 22 19:12:55 nativespace-cdp sshd[1030905]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 19:12:55 nativespace-cdp sshd[1030905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.24.128
Sep 22 19:12:57 nativespace-cdp sshd[1030905]: Failed password for invalid user bkp from 47.236.24.128 port 52794 ssh2
Sep 22 19:13:02 nativespace-cdp sshd[1030905]: Received disconnect from 47.236.24.128 port 52794:11: Bye Bye [preauth]
Sep 22 19:13:02 nativespace-cdp sshd[1030905]: Disconnected from 47.236.24.128 port 52794 [preauth]
Sep 22 19:15:20 nativespace-cdp sshd[1031754]: Invalid user admin from 62.36.40.105 port 31266
Sep 22 19:15:20 nativespace-cdp sshd[1031754]: input_userauth_request: invalid user admin [preauth]
Sep 22 19:15:20 nativespace-cdp sshd[1031754]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 19:15:20 nativespace-cdp sshd[1031754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.36.40.105
Sep 22 19:15:22 nativespace-cdp sshd[1031754]: Failed password for invalid user admin from 62.36.40.105 port 31266 ssh2
Sep 22 19:15:22 nativespace-cdp sshd[1031754]: Received disconnect from 62.36.40.105 port 31266:11: Bye Bye [preauth]
Sep 22 19:15:22 nativespace-cdp sshd[1031754]: Disconnected from 62.36.40.105 port 31266 [preauth]
Sep 22 19:15:48 nativespace-cdp sshd[1031814]: Connection closed by 171.103.33.131 port 49056 [preauth]
Sep 22 19:15:58 nativespace-cdp sshd[1031857]: Invalid user admin from 62.36.40.105 port 31324
Sep 22 19:15:58 nativespace-cdp sshd[1031857]: input_userauth_request: invalid user admin [preauth]
Sep 22 19:15:58 nativespace-cdp sshd[1031857]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 19:15:58 nativespace-cdp sshd[1031857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.36.40.105
Sep 22 19:16:00 nativespace-cdp sshd[1031857]: Failed password for invalid user admin from 62.36.40.105 port 31324 ssh2
Sep 22 19:16:28 nativespace-cdp sshd[1031968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.103.33.131  user=root
Sep 22 19:16:28 nativespace-cdp sshd[1031968]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 19:16:30 nativespace-cdp sshd[1031968]: Failed password for root from 171.103.33.131 port 35622 ssh2
Sep 22 19:16:33 nativespace-cdp sshd[1031968]: Received disconnect from 171.103.33.131 port 35622:11: Bye Bye [preauth]
Sep 22 19:16:33 nativespace-cdp sshd[1031968]: Disconnected from 171.103.33.131 port 35622 [preauth]
Sep 22 19:16:33 nativespace-cdp sshd[1031991]: Connection closed by 159.100.136.21 port 38106 [preauth]
Sep 22 19:17:18 nativespace-cdp sshd[1032113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.103.33.131  user=root
Sep 22 19:17:18 nativespace-cdp sshd[1032113]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 19:17:20 nativespace-cdp sshd[1032113]: Failed password for root from 171.103.33.131 port 50426 ssh2
Sep 22 19:17:29 nativespace-cdp sshd[1032153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.24.128  user=root
Sep 22 19:17:29 nativespace-cdp sshd[1032153]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 19:17:31 nativespace-cdp sshd[1032153]: Failed password for root from 47.236.24.128 port 58754 ssh2
Sep 22 19:17:31 nativespace-cdp sshd[1032153]: Received disconnect from 47.236.24.128 port 58754:11: Bye Bye [preauth]
Sep 22 19:17:31 nativespace-cdp sshd[1032153]: Disconnected from 47.236.24.128 port 58754 [preauth]
Sep 22 19:17:49 nativespace-cdp sshd[1032227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.24.128  user=root
Sep 22 19:17:49 nativespace-cdp sshd[1032227]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 19:17:51 nativespace-cdp sshd[1032227]: Failed password for root from 47.236.24.128 port 37508 ssh2
Sep 22 19:21:33 nativespace-cdp sshd[1033110]: Connection closed by 159.100.136.21 port 47556 [preauth]
Sep 22 19:26:33 nativespace-cdp sshd[1034140]: Connection closed by 159.100.136.21 port 57024 [preauth]
Sep 22 19:31:35 nativespace-cdp sshd[1035477]: Connection closed by 159.100.136.21 port 37606 [preauth]
Sep 22 19:36:33 nativespace-cdp sshd[1036578]: Connection closed by 159.100.136.21 port 47202 [preauth]
Sep 22 19:41:35 nativespace-cdp sshd[1037764]: Connection closed by 159.100.136.21 port 56310 [preauth]
Sep 22 19:46:33 nativespace-cdp sshd[1039325]: Connection closed by 159.100.136.21 port 37078 [preauth]
Sep 22 19:51:33 nativespace-cdp sshd[1040391]: Connection closed by 159.100.136.21 port 46042 [preauth]
Sep 22 19:56:33 nativespace-cdp sshd[1041465]: Connection closed by 159.100.136.21 port 55058 [preauth]
Sep 22 20:01:33 nativespace-cdp sshd[1042727]: Connection closed by 159.100.136.21 port 35390 [preauth]
Sep 22 20:06:33 nativespace-cdp sshd[1043998]: Connection closed by 159.100.136.21 port 43876 [preauth]
Sep 22 20:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 20:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:38 nativespace-cdp sudo[1044658]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 20:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:38 nativespace-cdp sudo[1044662]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 20:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:39 nativespace-cdp sudo[1044667]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:39 nativespace-cdp sudo[1044679]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:41 nativespace-cdp sudo[1044685]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:41 nativespace-cdp sudo[1044702]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:41 nativespace-cdp sudo[1044707]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:41 nativespace-cdp sudo[1044712]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:41 nativespace-cdp sudo[1044717]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:41 nativespace-cdp sudo[1044722]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:41 nativespace-cdp sudo[1044730]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:43 nativespace-cdp sudo[1044746]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:44 nativespace-cdp sudo[1044754]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sketchy user-2=cath user-3=havantho user-4=nvihkvu user-5=oubpgvbx user-6=tstardom user-7=what user-8=design user-9=ladburyp user-10=stagingerris user-11=dancinggardener user-12=kategilpin user-13=boldover user-14=nove user-15=bakery user-16=sosevalu user-17=crrtipdl user-18=onlycont user-19=attlebor user-20=lucy user-21=romaldki user-22=ranxterc user-23=hodgsonmail user-24=outdoorc user-25=branko user-26=jennimil user-27=tomandle user-28=careers user-29=nbhavers user-30=david user-31=chrisdal user-32=mcdermos user-33=pugwash user-34=howardon user-35=paulmca1 user-36=cwsocial user-37=cambria1 user-38=cathski user-39=ninejimm user-40=reliable user-41=eugincou user-42=courseme user-43=hirefootballgame user-44=lkpier user-45=ctedorgu user-46=philmcph user-47=donnychicago user-48=firstre5
Sep 22 20:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=steakbridieme user-50=nscdp user-51=health2045 user-52=fortunaz user-53=leftie user-54=foods user-55=hidden user-56=nomistakes user-57=barbersh user-58=tigerlet user-59=isleofwi user-60=smrszyqg user-61=nsceres user-62=burydropin user-63=fawcettd user-64=dhyana user-65=beauty user-66=eatspam user-67=darkstar user-68=sibtoncc user-69=asandcoc user-70=steve user-71=bwppodcast user-72=zebrapho user-73=alexadmin user-74=skyfirec user-75=nativene user-76=innovat1 user-77=stuartge user-78=askhform user-79=firstre2 user-80=vivienn1 user-81=battlere user-82=oneoarco user-83=brighto1 user-84=nstriton user-85=belle user-86=ggaaorgu user-87=newstoda user-88=bemadonn user-89=bedfords user-90=hubmaster user-91=carsinyo user-92=fetch user-93=gilpin user-94=milloyco user-95=elecleis user-96=connectedshoppin user-97=thqkgnbz user-98=accooper user-99=ianrayne user-100=opaiscyx user-101=coursemc user-102=jonhartl
Sep 22 20:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=seftvta user-104=ultbcrra user-105=firstres user-106=firstred user-107=southlon user-108=highlegh user-109=firstrel user-110=clarkass user-111=costestimatorco user-112=dickemery123 user-113=ptkxhsbt user-114=martsblo user-115=magichat user-116=lbhyisi user-117=hhdugcor user-118=strathar user-119=sarafoundation user-120=atestord user-121=lakesan1 user-122=brmrjxl user-123=musorguk user-124=megacards user-125=wilsonsw user-126=spectrum user-127=theblack user-128=hodgesonweb user-129=jarvisin user-130=stephani user-131=leereyn1 user-132=still user-133=agproduc user-134=connect9 user-135=athenare user-136=vantagep user-137=maflemin user-138=lbscrmod user-139=booff user-140=foundation user-141=markward user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 20:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 20:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:44 nativespace-cdp sudo[1044761]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:45 nativespace-cdp sudo[1044768]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lJaHBrGy50B5ljmE.~
Sep 22 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:45 nativespace-cdp sudo[1044773]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lJaHBrGy50B5ljmE.~'
Sep 22 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:45 nativespace-cdp sudo[1044777]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lJaHBrGy50B5ljmE.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:45 nativespace-cdp sudo[1044782]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:45 nativespace-cdp sudo[1044789]: pam_unix(sudo:session): session closed for user root
Sep 22 20:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 20:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 20:09:46 nativespace-cdp sudo[1044813]: pam_unix(sudo:session): session closed for user root
Sep 22 20:11:33 nativespace-cdp sshd[1045321]: Connection closed by 159.100.136.21 port 53060 [preauth]
Sep 22 20:16:37 nativespace-cdp sshd[1046613]: Connection closed by 159.100.136.21 port 34474 [preauth]
Sep 22 20:21:33 nativespace-cdp sshd[1047742]: Connection closed by 159.100.136.21 port 43284 [preauth]
Sep 22 20:26:33 nativespace-cdp sshd[1048775]: Connection closed by 159.100.136.21 port 52760 [preauth]
Sep 22 20:31:33 nativespace-cdp sshd[1049919]: Connection closed by 159.100.136.21 port 33940 [preauth]
Sep 22 20:36:33 nativespace-cdp sshd[1051056]: Connection closed by 159.100.136.21 port 42572 [preauth]
Sep 22 20:41:35 nativespace-cdp sshd[1052902]: Connection closed by 159.100.136.21 port 51568 [preauth]
Sep 22 20:46:33 nativespace-cdp sshd[1054399]: Connection closed by 159.100.136.21 port 60700 [preauth]
Sep 22 20:51:34 nativespace-cdp sshd[1055495]: Connection closed by 159.100.136.21 port 41522 [preauth]
Sep 22 20:52:52 nativespace-cdp sshd[1055734]: Invalid user sopuser from 189.244.72.185 port 36893
Sep 22 20:52:52 nativespace-cdp sshd[1055734]: input_userauth_request: invalid user sopuser [preauth]
Sep 22 20:52:52 nativespace-cdp sshd[1055734]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 20:52:52 nativespace-cdp sshd[1055734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.244.72.185
Sep 22 20:52:54 nativespace-cdp sshd[1055734]: Failed password for invalid user sopuser from 189.244.72.185 port 36893 ssh2
Sep 22 20:53:00 nativespace-cdp sshd[1055734]: Received disconnect from 189.244.72.185 port 36893:11: Bye Bye [preauth]
Sep 22 20:53:00 nativespace-cdp sshd[1055734]: Disconnected from 189.244.72.185 port 36893 [preauth]
Sep 22 20:53:46 nativespace-cdp sshd[1056043]: Invalid user odoo from 159.203.177.137 port 43392
Sep 22 20:53:46 nativespace-cdp sshd[1056043]: input_userauth_request: invalid user odoo [preauth]
Sep 22 20:53:46 nativespace-cdp sshd[1056043]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 20:53:46 nativespace-cdp sshd[1056043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.177.137
Sep 22 20:53:48 nativespace-cdp sshd[1056043]: Failed password for invalid user odoo from 159.203.177.137 port 43392 ssh2
Sep 22 20:53:58 nativespace-cdp sshd[1056043]: Received disconnect from 159.203.177.137 port 43392:11: Bye Bye [preauth]
Sep 22 20:53:58 nativespace-cdp sshd[1056043]: Disconnected from 159.203.177.137 port 43392 [preauth]
Sep 22 20:56:34 nativespace-cdp sshd[1056591]: Connection closed by 159.100.136.21 port 51014 [preauth]
Sep 22 20:57:55 nativespace-cdp sshd[1056818]: Invalid user ubuntu from 159.203.177.137 port 49946
Sep 22 20:57:55 nativespace-cdp sshd[1056818]: input_userauth_request: invalid user ubuntu [preauth]
Sep 22 20:57:55 nativespace-cdp sshd[1056818]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 20:57:55 nativespace-cdp sshd[1056818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.177.137
Sep 22 20:57:57 nativespace-cdp sshd[1056818]: Failed password for invalid user ubuntu from 159.203.177.137 port 49946 ssh2
Sep 22 20:57:57 nativespace-cdp sshd[1056818]: Received disconnect from 159.203.177.137 port 49946:11: Bye Bye [preauth]
Sep 22 20:57:57 nativespace-cdp sshd[1056818]: Disconnected from 159.203.177.137 port 49946 [preauth]
Sep 22 20:58:05 nativespace-cdp sshd[1056949]: Invalid user ftp_user from 189.244.72.185 port 33581
Sep 22 20:58:05 nativespace-cdp sshd[1056949]: input_userauth_request: invalid user ftp_user [preauth]
Sep 22 20:58:05 nativespace-cdp sshd[1056949]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 20:58:05 nativespace-cdp sshd[1056949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.244.72.185
Sep 22 20:58:07 nativespace-cdp sshd[1056949]: Failed password for invalid user ftp_user from 189.244.72.185 port 33581 ssh2
Sep 22 20:58:07 nativespace-cdp sshd[1056949]: Received disconnect from 189.244.72.185 port 33581:11: Bye Bye [preauth]
Sep 22 20:58:07 nativespace-cdp sshd[1056949]: Disconnected from 189.244.72.185 port 33581 [preauth]
Sep 22 20:58:26 nativespace-cdp sshd[1057069]: Invalid user test from 159.203.177.137 port 43190
Sep 22 20:58:26 nativespace-cdp sshd[1057069]: input_userauth_request: invalid user test [preauth]
Sep 22 20:58:26 nativespace-cdp sshd[1057069]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 20:58:26 nativespace-cdp sshd[1057069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.177.137
Sep 22 20:58:28 nativespace-cdp sshd[1057069]: Failed password for invalid user test from 159.203.177.137 port 43190 ssh2
Sep 22 20:58:28 nativespace-cdp sshd[1057069]: Received disconnect from 159.203.177.137 port 43190:11: Bye Bye [preauth]
Sep 22 20:58:28 nativespace-cdp sshd[1057069]: Disconnected from 159.203.177.137 port 43190 [preauth]
Sep 22 20:58:49 nativespace-cdp sshd[1057233]: Invalid user test from 189.244.72.185 port 39852
Sep 22 20:58:49 nativespace-cdp sshd[1057233]: input_userauth_request: invalid user test [preauth]
Sep 22 20:58:49 nativespace-cdp sshd[1057233]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 20:58:49 nativespace-cdp sshd[1057233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.244.72.185
Sep 22 20:58:51 nativespace-cdp sshd[1057233]: Failed password for invalid user test from 189.244.72.185 port 39852 ssh2
Sep 22 21:01:33 nativespace-cdp sshd[1058020]: Connection closed by 159.100.136.21 port 59678 [preauth]
Sep 22 21:06:33 nativespace-cdp sshd[1059130]: Connection closed by 159.100.136.21 port 41344 [preauth]
Sep 22 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:42 nativespace-cdp sudo[1059729]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:42 nativespace-cdp sudo[1059733]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:43 nativespace-cdp sudo[1059738]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 21:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:43 nativespace-cdp sudo[1059746]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 21:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:45 nativespace-cdp sudo[1059752]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 21:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:45 nativespace-cdp sudo[1059768]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 21:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:45 nativespace-cdp sudo[1059773]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 21:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:45 nativespace-cdp sudo[1059777]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 21:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:45 nativespace-cdp sudo[1059782]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 21:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:45 nativespace-cdp sudo[1059789]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 21:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:45 nativespace-cdp sudo[1059794]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 21:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:50 nativespace-cdp sudo[1059814]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 21:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:51 nativespace-cdp sudo[1059822]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cwsocial user-2=pugwash user-3=howardon user-4=paulmca1 user-5=cambria1 user-6=cathski user-7=ninejimm user-8=reliable user-9=eugincou user-10=courseme user-11=hirefootballgame user-12=lkpier user-13=firstre5 user-14=steakbridieme user-15=donnychicago user-16=ctedorgu user-17=philmcph user-18=nscdp user-19=foods user-20=leftie user-21=fortunaz user-22=health2045 user-23=nomistakes user-24=hidden user-25=tigerlet user-26=barbersh user-27=isleofwi user-28=smrszyqg user-29=nsceres user-30=fawcettd user-31=burydropin user-32=dhyana user-33=beauty user-34=darkstar user-35=eatspam user-36=asandcoc user-37=sibtoncc user-38=steve user-39=bwppodcast user-40=zebrapho user-41=havantho user-42=sketchy user-43=cath user-44=nvihkvu user-45=oubpgvbx user-46=tstardom user-47=what user-48=design
Sep 22 21:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=stagingerris user-50=dancinggardener user-51=ladburyp user-52=kategilpin user-53=boldover user-54=nove user-55=bakery user-56=crrtipdl user-57=sosevalu user-58=onlycont user-59=lucy user-60=attlebor user-61=romaldki user-62=hodgsonmail user-63=outdoorc user-64=ranxterc user-65=branko user-66=jennimil user-67=tomandle user-68=david user-69=careers user-70=nbhavers user-71=chrisdal user-72=mcdermos user-73=dickemery123 user-74=ptkxhsbt user-75=martsblo user-76=magichat user-77=hhdugcor user-78=lbhyisi user-79=strathar user-80=atestord user-81=sarafoundation user-82=brmrjxl user-83=lakesan1 user-84=megacards user-85=musorguk user-86=wilsonsw user-87=spectrum user-88=hodgesonweb user-89=theblack user-90=jarvisin user-91=stephani user-92=leereyn1 user-93=agproduc user-94=still user-95=vantagep user-96=athenare user-97=connect9 user-98=lbscrmod user-99=maflemin user-100=foundation user-101=booff
Sep 22 21:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=markward user-103=ulsukarm user-104=alexadmin user-105=skyfirec user-106=nativene user-107=innovat1 user-108=stuartge user-109=askhform user-110=vivienn1 user-111=firstre2 user-112=oneoarco user-113=battlere user-114=nstriton user-115=brighto1 user-116=newstoda user-117=belle user-118=ggaaorgu user-119=bemadonn user-120=bedfords user-121=hubmaster user-122=fetch user-123=carsinyo user-124=gilpin user-125=milloyco user-126=elecleis user-127=connectedshoppin user-128=thqkgnbz user-129=accooper user-130=ianrayne user-131=opaiscyx user-132=coursemc user-133=ultbcrra user-134=seftvta user-135=jonhartl user-136=firstres user-137=firstred user-138=highlegh user-139=southlon user-140=clarkass user-141=firstrel user-142=costestimatorco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 21:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 21:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:52 nativespace-cdp sudo[1059829]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 21:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:53 nativespace-cdp sudo[1059839]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v6zPRX1KiQXMIaPI.~
Sep 22 21:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:53 nativespace-cdp sudo[1059844]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v6zPRX1KiQXMIaPI.~'
Sep 22 21:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:53 nativespace-cdp sudo[1059848]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v6zPRX1KiQXMIaPI.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 21:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:53 nativespace-cdp sudo[1059854]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 21:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:53 nativespace-cdp sudo[1059859]: pam_unix(sudo:session): session closed for user root
Sep 22 21:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 21:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 21:09:54 nativespace-cdp sudo[1059882]: pam_unix(sudo:session): session closed for user root
Sep 22 21:11:33 nativespace-cdp sshd[1060321]: Connection closed by 159.100.136.21 port 50444 [preauth]
Sep 22 21:16:36 nativespace-cdp sshd[1061701]: Connection closed by 159.100.136.21 port 59736 [preauth]
Sep 22 21:21:33 nativespace-cdp sshd[1062841]: Connection closed by 159.100.136.21 port 40466 [preauth]
Sep 22 21:26:33 nativespace-cdp sshd[1064149]: Connection closed by 159.100.136.21 port 48924 [preauth]
Sep 22 21:31:33 nativespace-cdp sshd[1065719]: Connection closed by 159.100.136.21 port 57082 [preauth]
Sep 22 21:36:33 nativespace-cdp sshd[1066971]: Connection closed by 159.100.136.21 port 38416 [preauth]
Sep 22 21:41:33 nativespace-cdp sshd[1068231]: Connection closed by 159.100.136.21 port 47284 [preauth]
Sep 22 21:46:33 nativespace-cdp sshd[1069568]: Connection closed by 159.100.136.21 port 56604 [preauth]
Sep 22 21:51:33 nativespace-cdp sshd[1070640]: Connection closed by 159.100.136.21 port 37320 [preauth]
Sep 22 21:52:25 nativespace-cdp sshd[1070865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.26.215  user=root
Sep 22 21:52:25 nativespace-cdp sshd[1070865]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 21:52:27 nativespace-cdp sshd[1070865]: Failed password for root from 188.166.26.215 port 45020 ssh2
Sep 22 21:52:27 nativespace-cdp sshd[1070865]: Received disconnect from 188.166.26.215 port 45020:11: Bye Bye [preauth]
Sep 22 21:52:27 nativespace-cdp sshd[1070865]: Disconnected from 188.166.26.215 port 45020 [preauth]
Sep 22 21:52:53 nativespace-cdp sshd[1070971]: Invalid user username from 61.80.237.204 port 58878
Sep 22 21:52:53 nativespace-cdp sshd[1070971]: input_userauth_request: invalid user username [preauth]
Sep 22 21:52:53 nativespace-cdp sshd[1070971]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:52:53 nativespace-cdp sshd[1070971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.80.237.204
Sep 22 21:52:55 nativespace-cdp sshd[1070971]: Failed password for invalid user username from 61.80.237.204 port 58878 ssh2
Sep 22 21:52:55 nativespace-cdp sshd[1070971]: Received disconnect from 61.80.237.204 port 58878:11: Bye Bye [preauth]
Sep 22 21:52:55 nativespace-cdp sshd[1070971]: Disconnected from 61.80.237.204 port 58878 [preauth]
Sep 22 21:53:18 nativespace-cdp sshd[1071082]: Invalid user tomcat from 190.146.39.202 port 36076
Sep 22 21:53:18 nativespace-cdp sshd[1071082]: input_userauth_request: invalid user tomcat [preauth]
Sep 22 21:53:18 nativespace-cdp sshd[1071082]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:53:18 nativespace-cdp sshd[1071082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.146.39.202
Sep 22 21:53:20 nativespace-cdp sshd[1071082]: Failed password for invalid user tomcat from 190.146.39.202 port 36076 ssh2
Sep 22 21:53:20 nativespace-cdp sshd[1071082]: Received disconnect from 190.146.39.202 port 36076:11: Bye Bye [preauth]
Sep 22 21:53:20 nativespace-cdp sshd[1071082]: Disconnected from 190.146.39.202 port 36076 [preauth]
Sep 22 21:53:44 nativespace-cdp sshd[1071271]: Invalid user superman from 52.161.157.17 port 54484
Sep 22 21:53:44 nativespace-cdp sshd[1071271]: input_userauth_request: invalid user superman [preauth]
Sep 22 21:53:44 nativespace-cdp sshd[1071271]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:53:44 nativespace-cdp sshd[1071271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.157.17
Sep 22 21:53:46 nativespace-cdp sshd[1071271]: Failed password for invalid user superman from 52.161.157.17 port 54484 ssh2
Sep 22 21:53:46 nativespace-cdp sshd[1071271]: Received disconnect from 52.161.157.17 port 54484:11: Bye Bye [preauth]
Sep 22 21:53:46 nativespace-cdp sshd[1071271]: Disconnected from 52.161.157.17 port 54484 [preauth]
Sep 22 21:56:33 nativespace-cdp sshd[1071944]: Connection closed by 159.100.136.21 port 46448 [preauth]
Sep 22 21:57:03 nativespace-cdp sshd[1072035]: Invalid user tg from 188.166.26.215 port 36506
Sep 22 21:57:03 nativespace-cdp sshd[1072035]: input_userauth_request: invalid user tg [preauth]
Sep 22 21:57:03 nativespace-cdp sshd[1072035]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:57:03 nativespace-cdp sshd[1072035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.26.215
Sep 22 21:57:04 nativespace-cdp sshd[1072038]: Invalid user ubuntu from 61.80.237.204 port 46530
Sep 22 21:57:04 nativespace-cdp sshd[1072038]: input_userauth_request: invalid user ubuntu [preauth]
Sep 22 21:57:04 nativespace-cdp sshd[1072038]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:57:04 nativespace-cdp sshd[1072038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.80.237.204
Sep 22 21:57:05 nativespace-cdp sshd[1072035]: Failed password for invalid user tg from 188.166.26.215 port 36506 ssh2
Sep 22 21:57:05 nativespace-cdp sshd[1072035]: Received disconnect from 188.166.26.215 port 36506:11: Bye Bye [preauth]
Sep 22 21:57:05 nativespace-cdp sshd[1072035]: Disconnected from 188.166.26.215 port 36506 [preauth]
Sep 22 21:57:07 nativespace-cdp sshd[1072038]: Failed password for invalid user ubuntu from 61.80.237.204 port 46530 ssh2
Sep 22 21:57:07 nativespace-cdp sshd[1072038]: Received disconnect from 61.80.237.204 port 46530:11: Bye Bye [preauth]
Sep 22 21:57:07 nativespace-cdp sshd[1072038]: Disconnected from 61.80.237.204 port 46530 [preauth]
Sep 22 21:57:08 nativespace-cdp sshd[1072060]: Invalid user user from 190.146.39.202 port 48218
Sep 22 21:57:08 nativespace-cdp sshd[1072060]: input_userauth_request: invalid user user [preauth]
Sep 22 21:57:08 nativespace-cdp sshd[1072060]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:57:08 nativespace-cdp sshd[1072060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.146.39.202
Sep 22 21:57:10 nativespace-cdp sshd[1072060]: Failed password for invalid user user from 190.146.39.202 port 48218 ssh2
Sep 22 21:57:12 nativespace-cdp sshd[1072060]: Received disconnect from 190.146.39.202 port 48218:11: Bye Bye [preauth]
Sep 22 21:57:12 nativespace-cdp sshd[1072060]: Disconnected from 190.146.39.202 port 48218 [preauth]
Sep 22 21:57:25 nativespace-cdp sshd[1072201]: Invalid user ubuntu from 52.161.157.17 port 47418
Sep 22 21:57:25 nativespace-cdp sshd[1072201]: input_userauth_request: invalid user ubuntu [preauth]
Sep 22 21:57:25 nativespace-cdp sshd[1072201]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:57:25 nativespace-cdp sshd[1072201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.157.17
Sep 22 21:57:26 nativespace-cdp sshd[1072201]: Failed password for invalid user ubuntu from 52.161.157.17 port 47418 ssh2
Sep 22 21:57:26 nativespace-cdp sshd[1072201]: Received disconnect from 52.161.157.17 port 47418:11: Bye Bye [preauth]
Sep 22 21:57:26 nativespace-cdp sshd[1072201]: Disconnected from 52.161.157.17 port 47418 [preauth]
Sep 22 21:57:41 nativespace-cdp sshd[1072262]: Invalid user ubuntu from 188.166.26.215 port 46330
Sep 22 21:57:41 nativespace-cdp sshd[1072262]: input_userauth_request: invalid user ubuntu [preauth]
Sep 22 21:57:41 nativespace-cdp sshd[1072262]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:57:41 nativespace-cdp sshd[1072262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.26.215
Sep 22 21:57:42 nativespace-cdp sshd[1072262]: Failed password for invalid user ubuntu from 188.166.26.215 port 46330 ssh2
Sep 22 21:57:42 nativespace-cdp sshd[1072262]: Received disconnect from 188.166.26.215 port 46330:11: Bye Bye [preauth]
Sep 22 21:57:42 nativespace-cdp sshd[1072262]: Disconnected from 188.166.26.215 port 46330 [preauth]
Sep 22 21:58:05 nativespace-cdp sshd[1072384]: Invalid user svn from 190.146.39.202 port 34820
Sep 22 21:58:05 nativespace-cdp sshd[1072384]: input_userauth_request: invalid user svn [preauth]
Sep 22 21:58:05 nativespace-cdp sshd[1072384]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:58:05 nativespace-cdp sshd[1072384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.146.39.202
Sep 22 21:58:06 nativespace-cdp sshd[1072389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.157.17  user=root
Sep 22 21:58:06 nativespace-cdp sshd[1072389]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 21:58:07 nativespace-cdp sshd[1072384]: Failed password for invalid user svn from 190.146.39.202 port 34820 ssh2
Sep 22 21:58:07 nativespace-cdp sshd[1072384]: Received disconnect from 190.146.39.202 port 34820:11: Bye Bye [preauth]
Sep 22 21:58:07 nativespace-cdp sshd[1072384]: Disconnected from 190.146.39.202 port 34820 [preauth]
Sep 22 21:58:08 nativespace-cdp sshd[1072389]: Failed password for root from 52.161.157.17 port 38356 ssh2
Sep 22 21:58:09 nativespace-cdp sshd[1072389]: Received disconnect from 52.161.157.17 port 38356:11: Bye Bye [preauth]
Sep 22 21:58:09 nativespace-cdp sshd[1072389]: Disconnected from 52.161.157.17 port 38356 [preauth]
Sep 22 21:58:42 nativespace-cdp sshd[1072534]: Invalid user user03 from 61.80.237.204 port 47780
Sep 22 21:58:42 nativespace-cdp sshd[1072534]: input_userauth_request: invalid user user03 [preauth]
Sep 22 21:58:42 nativespace-cdp sshd[1072534]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 21:58:42 nativespace-cdp sshd[1072534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.80.237.204
Sep 22 21:58:44 nativespace-cdp sshd[1072534]: Failed password for invalid user user03 from 61.80.237.204 port 47780 ssh2
Sep 22 21:58:46 nativespace-cdp sshd[1072534]: Received disconnect from 61.80.237.204 port 47780:11: Bye Bye [preauth]
Sep 22 21:58:46 nativespace-cdp sshd[1072534]: Disconnected from 61.80.237.204 port 47780 [preauth]
Sep 22 22:01:33 nativespace-cdp sshd[1073467]: Connection closed by 159.100.136.21 port 55282 [preauth]
Sep 22 22:06:33 nativespace-cdp sshd[1074708]: Connection closed by 159.100.136.21 port 36878 [preauth]
Sep 22 22:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 22:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:52 nativespace-cdp sudo[1075480]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 22:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:52 nativespace-cdp sudo[1075484]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 22:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:54 nativespace-cdp sudo[1075489]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 22:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:54 nativespace-cdp sudo[1075499]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 22:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:58 nativespace-cdp sudo[1075505]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 22:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:58 nativespace-cdp sudo[1075525]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 22:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:58 nativespace-cdp sudo[1075530]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 22:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:58 nativespace-cdp sudo[1075534]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 22:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:58 nativespace-cdp sudo[1075539]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 22:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:58 nativespace-cdp sudo[1075545]: pam_unix(sudo:session): session closed for user root
Sep 22 22:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 22:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:09:59 nativespace-cdp sudo[1075550]: pam_unix(sudo:session): session closed for user root
Sep 22 22:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 22:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:10:08 nativespace-cdp sudo[1075699]: pam_unix(sudo:session): session closed for user root
Sep 22 22:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 22:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:10:08 nativespace-cdp sudo[1075707]: pam_unix(sudo:session): session closed for user root
Sep 22 22:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jennimil user-2=tomandle user-3=nbhavers user-4=careers user-5=david user-6=chrisdal user-7=mcdermos user-8=onlycont user-9=attlebor user-10=lucy user-11=romaldki user-12=outdoorc user-13=hodgsonmail user-14=ranxterc user-15=branko user-16=boldover user-17=nove user-18=bakery user-19=sosevalu user-20=crrtipdl user-21=sketchy user-22=cath user-23=havantho user-24=nvihkvu user-25=tstardom user-26=oubpgvbx user-27=what user-28=design user-29=ladburyp user-30=stagingerris user-31=dancinggardener user-32=kategilpin user-33=asandcoc user-34=sibtoncc user-35=steve user-36=bwppodcast user-37=zebrapho user-38=nsceres user-39=burydropin user-40=fawcettd user-41=dhyana user-42=beauty user-43=eatspam user-44=darkstar user-45=lkpier user-46=ctedorgu user-47=philmcph user-48=donnychicago user-49=firstre5
Sep 22 22:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=steakbridieme user-51=nscdp user-52=health2045 user-53=fortunaz user-54=leftie user-55=foods user-56=hidden user-57=nomistakes user-58=tigerlet user-59=barbersh user-60=isleofwi user-61=smrszyqg user-62=howardon user-63=paulmca1 user-64=pugwash user-65=cwsocial user-66=cambria1 user-67=cathski user-68=reliable user-69=ninejimm user-70=eugincou user-71=courseme user-72=hirefootballgame user-73=coursemc user-74=opaiscyx user-75=seftvta user-76=jonhartl user-77=ultbcrra user-78=firstres user-79=firstred user-80=southlon user-81=highlegh user-82=firstrel user-83=clarkass user-84=costestimatorco user-85=hubmaster user-86=carsinyo user-87=fetch user-88=milloyco user-89=gilpin user-90=elecleis user-91=connectedshoppin user-92=thqkgnbz user-93=accooper user-94=ianrayne user-95=firstre2 user-96=vivienn1 user-97=battlere user-98=oneoarco user-99=brighto1 user-100=nstriton user-101=belle user-102=ggaaorgu
Sep 22 22:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=newstoda user-104=bemadonn user-105=bedfords user-106=skyfirec user-107=alexadmin user-108=nativene user-109=innovat1 user-110=stuartge user-111=askhform user-112=connect9 user-113=athenare user-114=vantagep user-115=maflemin user-116=lbscrmod user-117=foundation user-118=booff user-119=markward user-120=ulsukarm user-121=spectrum user-122=theblack user-123=hodgesonweb user-124=jarvisin user-125=stephani user-126=leereyn1 user-127=still user-128=agproduc user-129=strathar user-130=sarafoundation user-131=atestord user-132=lakesan1 user-133=brmrjxl user-134=musorguk user-135=megacards user-136=wilsonsw user-137=dickemery123 user-138=ptkxhsbt user-139=martsblo user-140=magichat user-141=lbhyisi user-142=hhdugcor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 22:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 22:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:10:09 nativespace-cdp sudo[1075712]: pam_unix(sudo:session): session closed for user root
Sep 22 22:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 22:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:10:10 nativespace-cdp sudo[1075722]: pam_unix(sudo:session): session closed for user root
Sep 22 22:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7wUirVjfXVsCRQu9.~
Sep 22 22:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:10:10 nativespace-cdp sudo[1075726]: pam_unix(sudo:session): session closed for user root
Sep 22 22:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7wUirVjfXVsCRQu9.~'
Sep 22 22:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:10:10 nativespace-cdp sudo[1075729]: pam_unix(sudo:session): session closed for user root
Sep 22 22:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7wUirVjfXVsCRQu9.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 22:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:10:10 nativespace-cdp sudo[1075733]: pam_unix(sudo:session): session closed for user root
Sep 22 22:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 22:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:10:10 nativespace-cdp sudo[1075736]: pam_unix(sudo:session): session closed for user root
Sep 22 22:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 22:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 22:10:12 nativespace-cdp sudo[1075755]: pam_unix(sudo:session): session closed for user root
Sep 22 22:11:33 nativespace-cdp sshd[1076051]: Connection closed by 159.100.136.21 port 45914 [preauth]
Sep 22 22:16:33 nativespace-cdp sshd[1077413]: Connection closed by 159.100.136.21 port 54908 [preauth]
Sep 22 22:21:33 nativespace-cdp sshd[1078832]: Connection closed by 159.100.136.21 port 36096 [preauth]
Sep 22 22:26:33 nativespace-cdp sshd[1080117]: Connection closed by 159.100.136.21 port 45570 [preauth]
Sep 22 22:31:33 nativespace-cdp sshd[1081490]: Connection closed by 159.100.136.21 port 54748 [preauth]
Sep 22 22:36:33 nativespace-cdp sshd[1082897]: Connection closed by 159.100.136.21 port 35968 [preauth]
Sep 22 22:41:33 nativespace-cdp sshd[1084155]: Connection closed by 159.100.136.21 port 45268 [preauth]
Sep 22 22:46:33 nativespace-cdp sshd[1085541]: Connection closed by 159.100.136.21 port 54826 [preauth]
Sep 22 22:51:33 nativespace-cdp sshd[1086744]: Connection closed by 159.100.136.21 port 35112 [preauth]
Sep 22 22:56:33 nativespace-cdp sshd[1087964]: Connection closed by 159.100.136.21 port 44332 [preauth]
Sep 22 23:01:34 nativespace-cdp sshd[1089438]: Connection closed by 159.100.136.21 port 53360 [preauth]
Sep 22 23:06:34 nativespace-cdp sshd[1090583]: Connection closed by 159.100.136.21 port 34374 [preauth]
Sep 22 23:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 23:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:38 nativespace-cdp sudo[1091249]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 23:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:38 nativespace-cdp sshd[1091239]: Invalid user sysadmin from 154.211.15.218 port 48308
Sep 22 23:09:38 nativespace-cdp sudo[1091253]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:38 nativespace-cdp sshd[1091239]: input_userauth_request: invalid user sysadmin [preauth]
Sep 22 23:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 23:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:38 nativespace-cdp sshd[1091239]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 23:09:38 nativespace-cdp sshd[1091239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.211.15.218
Sep 22 23:09:39 nativespace-cdp sudo[1091258]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 23:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:39 nativespace-cdp sudo[1091268]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 23:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:41 nativespace-cdp sshd[1091239]: Failed password for invalid user sysadmin from 154.211.15.218 port 48308 ssh2
Sep 22 23:09:41 nativespace-cdp sshd[1091239]: Received disconnect from 154.211.15.218 port 48308:11: Bye Bye [preauth]
Sep 22 23:09:41 nativespace-cdp sshd[1091239]: Disconnected from 154.211.15.218 port 48308 [preauth]
Sep 22 23:09:41 nativespace-cdp sudo[1091274]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 23:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:41 nativespace-cdp sudo[1091286]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 23:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:41 nativespace-cdp sudo[1091291]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 23:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:41 nativespace-cdp sudo[1091295]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 23:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:41 nativespace-cdp sudo[1091300]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 23:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:41 nativespace-cdp sudo[1091306]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 23:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:41 nativespace-cdp sudo[1091311]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:43 nativespace-cdp sudo[1091321]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:43 nativespace-cdp sudo[1091327]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=brighto1 user-2=nstriton user-3=firstre2 user-4=vivienn1 user-5=battlere user-6=oneoarco user-7=bedfords user-8=belle user-9=ggaaorgu user-10=newstoda user-11=bemadonn user-12=skyfirec user-13=alexadmin user-14=innovat1 user-15=askhform user-16=stuartge user-17=nativene user-18=seftvta user-19=jonhartl user-20=ultbcrra user-21=firstres user-22=opaiscyx user-23=coursemc user-24=clarkass user-25=firstrel user-26=costestimatorco user-27=firstred user-28=southlon user-29=highlegh user-30=milloyco user-31=gilpin user-32=elecleis user-33=hubmaster user-34=carsinyo user-35=fetch user-36=accooper user-37=ianrayne user-38=connectedshoppin user-39=thqkgnbz user-40=lakesan1 user-41=brmrjxl user-42=strathar user-43=sarafoundation user-44=atestord user-45=wilsonsw user-46=musorguk user-47=megacards
Sep 22 23:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=martsblo user-49=dickemery123 user-50=ptkxhsbt user-51=lbhyisi user-52=hhdugcor user-53=magichat user-54=foundation user-55=booff user-56=markward user-57=athenare user-58=connect9 user-59=vantagep user-60=maflemin user-61=lbscrmod user-62=ulsukarm user-63=jarvisin user-64=spectrum user-65=hodgesonweb user-66=theblack user-67=still user-68=agproduc user-69=stephani user-70=leereyn1 user-71=nove user-72=boldover user-73=bakery user-74=sosevalu user-75=crrtipdl user-76=oubpgvbx user-77=tstardom user-78=what user-79=sketchy user-80=cath user-81=havantho user-82=nvihkvu user-83=ladburyp user-84=stagingerris user-85=dancinggardener user-86=kategilpin user-87=design user-88=tomandle user-89=jennimil user-90=chrisdal user-91=mcdermos user-92=careers user-93=nbhavers user-94=david user-95=attlebor user-96=lucy user-97=onlycont user-98=outdoorc user-99=hodgsonmail user-100=ranxterc user-101=branko
Sep 22 23:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=romaldki user-103=nscdp user-104=fortunaz user-105=health2045 user-106=foods user-107=leftie user-108=lkpier user-109=philmcph user-110=ctedorgu user-111=donnychicago user-112=firstre5 user-113=steakbridieme user-114=isleofwi user-115=smrszyqg user-116=hidden user-117=nomistakes user-118=barbersh user-119=tigerlet user-120=cambria1 user-121=cathski user-122=ninejimm user-123=reliable user-124=paulmca1 user-125=howardon user-126=pugwash user-127=cwsocial user-128=hirefootballgame user-129=eugincou user-130=courseme user-131=asandcoc user-132=sibtoncc user-133=bwppodcast user-134=zebrapho user-135=steve user-136=burydropin user-137=fawcettd user-138=nsceres user-139=beauty user-140=eatspam user-141=darkstar user-142=dhyana feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 23:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:44 nativespace-cdp sudo[1091335]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:44 nativespace-cdp sudo[1091343]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d9zUJ4JANK0MRE6n.~
Sep 22 23:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:45 nativespace-cdp sudo[1091348]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d9zUJ4JANK0MRE6n.~'
Sep 22 23:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:45 nativespace-cdp sudo[1091352]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d9zUJ4JANK0MRE6n.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 23:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:45 nativespace-cdp sudo[1091358]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 23:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:45 nativespace-cdp sudo[1091363]: pam_unix(sudo:session): session closed for user root
Sep 22 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 23:09:52 nativespace-cdp sudo[1091397]: pam_unix(sudo:session): session closed for user root
Sep 22 23:11:33 nativespace-cdp sshd[1091939]: Connection closed by 159.100.136.21 port 43020 [preauth]
Sep 22 23:13:30 nativespace-cdp sshd[1092255]: Invalid user test_user from 154.211.15.218 port 34000
Sep 22 23:13:30 nativespace-cdp sshd[1092255]: input_userauth_request: invalid user test_user [preauth]
Sep 22 23:13:30 nativespace-cdp sshd[1092255]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 23:13:30 nativespace-cdp sshd[1092255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.211.15.218
Sep 22 23:13:32 nativespace-cdp sshd[1092255]: Failed password for invalid user test_user from 154.211.15.218 port 34000 ssh2
Sep 22 23:13:34 nativespace-cdp sshd[1092255]: Received disconnect from 154.211.15.218 port 34000:11: Bye Bye [preauth]
Sep 22 23:13:34 nativespace-cdp sshd[1092255]: Disconnected from 154.211.15.218 port 34000 [preauth]
Sep 22 23:14:14 nativespace-cdp sshd[1092522]: Invalid user tuan from 154.211.15.218 port 52918
Sep 22 23:14:14 nativespace-cdp sshd[1092522]: input_userauth_request: invalid user tuan [preauth]
Sep 22 23:14:15 nativespace-cdp sshd[1092522]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 23:14:15 nativespace-cdp sshd[1092522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.211.15.218
Sep 22 23:14:17 nativespace-cdp sshd[1092522]: Failed password for invalid user tuan from 154.211.15.218 port 52918 ssh2
Sep 22 23:16:33 nativespace-cdp sshd[1093158]: Connection closed by 159.100.136.21 port 52156 [preauth]
Sep 22 23:21:33 nativespace-cdp sshd[1094488]: Connection closed by 159.100.136.21 port 33136 [preauth]
Sep 22 23:26:33 nativespace-cdp sshd[1095527]: Connection closed by 159.100.136.21 port 42702 [preauth]
Sep 22 23:31:36 nativespace-cdp sshd[1096957]: Connection closed by 159.100.136.21 port 51882 [preauth]
Sep 22 23:36:33 nativespace-cdp sshd[1098115]: Connection closed by 159.100.136.21 port 33250 [preauth]
Sep 22 23:41:35 nativespace-cdp sshd[1099205]: Connection closed by 159.100.136.21 port 42174 [preauth]
Sep 22 23:42:46 nativespace-cdp sshd[1099437]: Invalid user radix from 184.168.121.235 port 57914
Sep 22 23:42:46 nativespace-cdp sshd[1099437]: input_userauth_request: invalid user radix [preauth]
Sep 22 23:42:46 nativespace-cdp sshd[1099437]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 23:42:46 nativespace-cdp sshd[1099437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.168.121.235
Sep 22 23:42:48 nativespace-cdp sshd[1099437]: Failed password for invalid user radix from 184.168.121.235 port 57914 ssh2
Sep 22 23:42:48 nativespace-cdp sshd[1099437]: Received disconnect from 184.168.121.235 port 57914:11: Bye Bye [preauth]
Sep 22 23:42:48 nativespace-cdp sshd[1099437]: Disconnected from 184.168.121.235 port 57914 [preauth]
Sep 22 23:45:10 nativespace-cdp sshd[1100278]: Invalid user bkp from 202.124.185.146 port 46552
Sep 22 23:45:10 nativespace-cdp sshd[1100278]: input_userauth_request: invalid user bkp [preauth]
Sep 22 23:45:10 nativespace-cdp sshd[1100278]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 23:45:10 nativespace-cdp sshd[1100278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.124.185.146
Sep 22 23:45:11 nativespace-cdp sshd[1100278]: Failed password for invalid user bkp from 202.124.185.146 port 46552 ssh2
Sep 22 23:45:12 nativespace-cdp sshd[1100278]: Received disconnect from 202.124.185.146 port 46552:11: Bye Bye [preauth]
Sep 22 23:45:12 nativespace-cdp sshd[1100278]: Disconnected from 202.124.185.146 port 46552 [preauth]
Sep 22 23:46:21 nativespace-cdp sshd[1100414]: Invalid user mosquitto from 45.120.115.150 port 55356
Sep 22 23:46:21 nativespace-cdp sshd[1100414]: input_userauth_request: invalid user mosquitto [preauth]
Sep 22 23:46:21 nativespace-cdp sshd[1100414]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 23:46:21 nativespace-cdp sshd[1100414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.120.115.150
Sep 22 23:46:23 nativespace-cdp sshd[1100414]: Failed password for invalid user mosquitto from 45.120.115.150 port 55356 ssh2
Sep 22 23:46:23 nativespace-cdp sshd[1100414]: Received disconnect from 45.120.115.150 port 55356:11: Bye Bye [preauth]
Sep 22 23:46:23 nativespace-cdp sshd[1100414]: Disconnected from 45.120.115.150 port 55356 [preauth]
Sep 22 23:46:33 nativespace-cdp sshd[1100601]: Connection closed by 159.100.136.21 port 51574 [preauth]
Sep 22 23:48:39 nativespace-cdp sshd[1101140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.168.121.235  user=root
Sep 22 23:48:39 nativespace-cdp sshd[1101140]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 23:48:41 nativespace-cdp sshd[1101140]: Failed password for root from 184.168.121.235 port 58416 ssh2
Sep 22 23:48:41 nativespace-cdp sshd[1101140]: Received disconnect from 184.168.121.235 port 58416:11: Bye Bye [preauth]
Sep 22 23:48:41 nativespace-cdp sshd[1101140]: Disconnected from 184.168.121.235 port 58416 [preauth]
Sep 22 23:49:13 nativespace-cdp sshd[1101271]: Invalid user radix from 45.120.115.150 port 60662
Sep 22 23:49:13 nativespace-cdp sshd[1101271]: input_userauth_request: invalid user radix [preauth]
Sep 22 23:49:13 nativespace-cdp sshd[1101271]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 23:49:13 nativespace-cdp sshd[1101271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.120.115.150
Sep 22 23:49:14 nativespace-cdp sshd[1101271]: Failed password for invalid user radix from 45.120.115.150 port 60662 ssh2
Sep 22 23:49:15 nativespace-cdp sshd[1101271]: Received disconnect from 45.120.115.150 port 60662:11: Bye Bye [preauth]
Sep 22 23:49:15 nativespace-cdp sshd[1101271]: Disconnected from 45.120.115.150 port 60662 [preauth]
Sep 22 23:49:24 nativespace-cdp sshd[1101402]: Invalid user iptv from 184.168.121.235 port 43028
Sep 22 23:49:24 nativespace-cdp sshd[1101402]: input_userauth_request: invalid user iptv [preauth]
Sep 22 23:49:24 nativespace-cdp sshd[1101402]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 23:49:24 nativespace-cdp sshd[1101402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.168.121.235
Sep 22 23:49:25 nativespace-cdp sshd[1101402]: Failed password for invalid user iptv from 184.168.121.235 port 43028 ssh2
Sep 22 23:49:26 nativespace-cdp sshd[1101402]: Received disconnect from 184.168.121.235 port 43028:11: Bye Bye [preauth]
Sep 22 23:49:26 nativespace-cdp sshd[1101402]: Disconnected from 184.168.121.235 port 43028 [preauth]
Sep 22 23:49:59 nativespace-cdp sshd[1101573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.120.115.150  user=root
Sep 22 23:49:59 nativespace-cdp sshd[1101573]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 23:50:01 nativespace-cdp sshd[1101573]: Failed password for root from 45.120.115.150 port 44794 ssh2
Sep 22 23:50:04 nativespace-cdp sshd[1101573]: Received disconnect from 45.120.115.150 port 44794:11: Bye Bye [preauth]
Sep 22 23:50:04 nativespace-cdp sshd[1101573]: Disconnected from 45.120.115.150 port 44794 [preauth]
Sep 22 23:51:33 nativespace-cdp sshd[1102093]: Connection closed by 159.100.136.21 port 32856 [preauth]
Sep 22 23:51:33 nativespace-cdp sshd[1102088]: Invalid user adminftp from 202.124.185.146 port 43406
Sep 22 23:51:33 nativespace-cdp sshd[1102088]: input_userauth_request: invalid user adminftp [preauth]
Sep 22 23:51:33 nativespace-cdp sshd[1102088]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 23:51:33 nativespace-cdp sshd[1102088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.124.185.146
Sep 22 23:51:35 nativespace-cdp sshd[1102088]: Failed password for invalid user adminftp from 202.124.185.146 port 43406 ssh2
Sep 22 23:51:35 nativespace-cdp sshd[1102088]: Received disconnect from 202.124.185.146 port 43406:11: Bye Bye [preauth]
Sep 22 23:51:35 nativespace-cdp sshd[1102088]: Disconnected from 202.124.185.146 port 43406 [preauth]
Sep 22 23:52:41 nativespace-cdp sshd[1102351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.124.185.146  user=root
Sep 22 23:52:41 nativespace-cdp sshd[1102351]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 23:52:43 nativespace-cdp sshd[1102351]: Failed password for root from 202.124.185.146 port 49878 ssh2
Sep 22 23:52:47 nativespace-cdp sshd[1102351]: Received disconnect from 202.124.185.146 port 49878:11: Bye Bye [preauth]
Sep 22 23:52:47 nativespace-cdp sshd[1102351]: Disconnected from 202.124.185.146 port 49878 [preauth]
Sep 22 23:56:33 nativespace-cdp sshd[1103417]: Connection closed by 159.100.136.21 port 42388 [preauth]
Sep 23 00:01:33 nativespace-cdp sshd[1105078]: Connection closed by 159.100.136.21 port 51998 [preauth]
Sep 23 00:06:33 nativespace-cdp sshd[1106535]: Connection closed by 159.100.136.21 port 33310 [preauth]
Sep 23 00:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 00:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:38 nativespace-cdp sudo[1107429]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 00:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:38 nativespace-cdp sudo[1107433]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 00:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:39 nativespace-cdp sudo[1107438]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 00:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:39 nativespace-cdp sudo[1107446]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 00:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:42 nativespace-cdp sudo[1107452]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 00:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:42 nativespace-cdp sudo[1107472]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 00:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:42 nativespace-cdp sudo[1107478]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 00:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:42 nativespace-cdp sudo[1107482]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 00:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:42 nativespace-cdp sudo[1107487]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 00:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:42 nativespace-cdp sudo[1107493]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 00:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:42 nativespace-cdp sudo[1107498]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 00:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:44 nativespace-cdp sudo[1107518]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 00:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:44 nativespace-cdp sudo[1107524]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steve user-2=zebrapho user-3=bwppodcast user-4=asandcoc user-5=sibtoncc user-6=dhyana user-7=darkstar user-8=eatspam user-9=beauty user-10=nsceres user-11=fawcettd user-12=burydropin user-13=tigerlet user-14=barbersh user-15=nomistakes user-16=hidden user-17=smrszyqg user-18=isleofwi user-19=donnychicago user-20=firstre5 user-21=steakbridieme user-22=ctedorgu user-23=philmcph user-24=lkpier user-25=foods user-26=leftie user-27=health2045 user-28=fortunaz user-29=nscdp user-30=courseme user-31=eugincou user-32=hirefootballgame user-33=cwsocial user-34=pugwash user-35=howardon user-36=paulmca1 user-37=ninejimm user-38=reliable user-39=cambria1 user-40=cathski user-41=david user-42=careers user-43=nbhavers user-44=mcdermos user-45=chrisdal user-46=jennimil user-47=tomandle user-48=romaldki
Sep 23 00:09:45 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=branko user-50=hodgsonmail user-51=ranxterc user-52=outdoorc user-53=onlycont user-54=lucy user-55=attlebor user-56=crrtipdl user-57=sosevalu user-58=bakery user-59=boldover user-60=nove user-61=design user-62=kategilpin user-63=stagingerris user-64=dancinggardener user-65=ladburyp user-66=nvihkvu user-67=havantho user-68=sketchy user-69=cath user-70=what user-71=tstardom user-72=oubpgvbx user-73=ulsukarm user-74=lbscrmod user-75=maflemin user-76=vantagep user-77=athenare user-78=connect9 user-79=booff user-80=foundation user-81=markward user-82=leereyn1 user-83=stephani user-84=agproduc user-85=still user-86=hodgesonweb user-87=theblack user-88=spectrum user-89=jarvisin user-90=megacards user-91=musorguk user-92=wilsonsw user-93=atestord user-94=sarafoundation user-95=strathar user-96=lakesan1 user-97=brmrjxl user-98=magichat user-99=hhdugcor user-100=lbhyisi user-101=ptkxhsbt user-102=dickemery123
Sep 23 00:09:45 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=martsblo user-104=highlegh user-105=southlon user-106=firstred user-107=costestimatorco user-108=clarkass user-109=firstrel user-110=opaiscyx user-111=coursemc user-112=firstres user-113=ultbcrra user-114=seftvta user-115=jonhartl user-116=thqkgnbz user-117=connectedshoppin user-118=ianrayne user-119=accooper user-120=fetch user-121=carsinyo user-122=hubmaster user-123=elecleis user-124=gilpin user-125=milloyco user-126=bemadonn user-127=newstoda user-128=belle user-129=ggaaorgu user-130=bedfords user-131=oneoarco user-132=battlere user-133=vivienn1 user-134=firstre2 user-135=nstriton user-136=brighto1 user-137=nativene user-138=askhform user-139=stuartge user-140=innovat1 user-141=skyfirec user-142=alexadmin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 00:09:45 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 00:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:45 nativespace-cdp sudo[1107533]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 00:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:46 nativespace-cdp sudo[1107556]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0sZN4GEHf8xpojER.~
Sep 23 00:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:46 nativespace-cdp sudo[1107562]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0sZN4GEHf8xpojER.~'
Sep 23 00:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:46 nativespace-cdp sudo[1107566]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0sZN4GEHf8xpojER.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 00:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:46 nativespace-cdp sudo[1107572]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 00:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:46 nativespace-cdp sudo[1107577]: pam_unix(sudo:session): session closed for user root
Sep 23 00:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 00:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 00:09:48 nativespace-cdp sudo[1107607]: pam_unix(sudo:session): session closed for user root
Sep 23 00:11:33 nativespace-cdp sshd[1108193]: Connection closed by 159.100.136.21 port 42434 [preauth]
Sep 23 00:16:33 nativespace-cdp sshd[1109965]: Connection closed by 159.100.136.21 port 52180 [preauth]
Sep 23 00:21:33 nativespace-cdp sshd[1111539]: Connection closed by 159.100.136.21 port 60428 [preauth]
Sep 23 00:26:34 nativespace-cdp sshd[1112871]: Connection closed by 159.100.136.21 port 41450 [preauth]
Sep 23 00:31:33 nativespace-cdp sshd[1114601]: Connection closed by 159.100.136.21 port 50936 [preauth]
Sep 23 00:36:33 nativespace-cdp sshd[1116147]: Connection closed by 159.100.136.21 port 60144 [preauth]
Sep 23 00:41:33 nativespace-cdp sshd[1117543]: Connection closed by 159.100.136.21 port 41500 [preauth]
Sep 23 00:46:33 nativespace-cdp sshd[1119071]: Connection closed by 159.100.136.21 port 50338 [preauth]
Sep 23 00:51:33 nativespace-cdp sshd[1120524]: Connection closed by 159.100.136.21 port 59772 [preauth]
Sep 23 00:53:40 nativespace-cdp sshd[1120918]: Connection closed by 20.194.60.135 port 45546 [preauth]
Sep 23 00:56:35 nativespace-cdp sshd[1121605]: Connection closed by 159.100.136.21 port 40832 [preauth]
Sep 23 01:01:37 nativespace-cdp sshd[1123095]: Connection closed by 159.100.136.21 port 49598 [preauth]
Sep 23 01:06:33 nativespace-cdp sshd[1124393]: Connection closed by 159.100.136.21 port 58928 [preauth]
Sep 23 01:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 01:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:43 nativespace-cdp sudo[1124969]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 01:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:43 nativespace-cdp sudo[1124972]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 01:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:44 nativespace-cdp sudo[1124975]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 01:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:44 nativespace-cdp sudo[1124984]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 01:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:47 nativespace-cdp sudo[1124987]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 01:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:48 nativespace-cdp sudo[1125077]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 01:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:48 nativespace-cdp sudo[1125081]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 01:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:48 nativespace-cdp sudo[1125084]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 01:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:48 nativespace-cdp sudo[1125087]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 01:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:48 nativespace-cdp sudo[1125090]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 01:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:48 nativespace-cdp sudo[1125094]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 01:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:50 nativespace-cdp sudo[1125112]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 01:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:50 nativespace-cdp sudo[1125116]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=oubpgvbx user-2=tstardom user-3=what user-4=havantho user-5=cath user-6=sketchy user-7=nvihkvu user-8=dancinggardener user-9=stagingerris user-10=ladburyp user-11=kategilpin user-12=design user-13=nove user-14=boldover user-15=bakery user-16=crrtipdl user-17=sosevalu user-18=lucy user-19=attlebor user-20=onlycont user-21=hodgsonmail user-22=outdoorc user-23=ranxterc user-24=branko user-25=romaldki user-26=tomandle user-27=jennimil user-28=chrisdal user-29=mcdermos user-30=david user-31=careers user-32=nbhavers user-33=cambria1 user-34=cathski user-35=reliable user-36=ninejimm user-37=cwsocial user-38=howardon user-39=paulmca1 user-40=pugwash user-41=hirefootballgame user-42=eugincou user-43=courseme user-44=nscdp user-45=leftie user-46=foods user-47=fortunaz user-48=health2045 user-49=lkpier
Sep 23 01:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=firstre5 user-51=steakbridieme user-52=donnychicago user-53=ctedorgu user-54=philmcph user-55=smrszyqg user-56=isleofwi user-57=nomistakes user-58=hidden user-59=barbersh user-60=tigerlet user-61=fawcettd user-62=burydropin user-63=nsceres user-64=beauty user-65=darkstar user-66=eatspam user-67=dhyana user-68=asandcoc user-69=sibtoncc user-70=bwppodcast user-71=zebrapho user-72=steve user-73=alexadmin user-74=skyfirec user-75=innovat1 user-76=askhform user-77=stuartge user-78=nativene user-79=nstriton user-80=brighto1 user-81=vivienn1 user-82=firstre2 user-83=oneoarco user-84=battlere user-85=bedfords user-86=newstoda user-87=belle user-88=ggaaorgu user-89=bemadonn user-90=milloyco user-91=gilpin user-92=elecleis user-93=hubmaster user-94=fetch user-95=carsinyo user-96=accooper user-97=ianrayne user-98=connectedshoppin user-99=thqkgnbz user-100=ultbcrra user-101=jonhartl user-102=seftvta user-103=firstres
Sep 23 01:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=opaiscyx user-105=coursemc user-106=firstrel user-107=clarkass user-108=costestimatorco user-109=firstred user-110=highlegh user-111=southlon user-112=martsblo user-113=dickemery123 user-114=ptkxhsbt user-115=hhdugcor user-116=lbhyisi user-117=magichat user-118=lakesan1 user-119=brmrjxl user-120=strathar user-121=atestord user-122=sarafoundation user-123=wilsonsw user-124=megacards user-125=musorguk user-126=jarvisin user-127=spectrum user-128=theblack user-129=hodgesonweb user-130=agproduc user-131=still user-132=stephani user-133=leereyn1 user-134=booff user-135=foundation user-136=markward user-137=vantagep user-138=athenare user-139=connect9 user-140=lbscrmod user-141=maflemin user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 01:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 01:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:51 nativespace-cdp sudo[1125120]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 01:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:52 nativespace-cdp sudo[1125125]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8bst2M7jpWjLTq7h.~
Sep 23 01:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:52 nativespace-cdp sudo[1125128]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8bst2M7jpWjLTq7h.~'
Sep 23 01:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:52 nativespace-cdp sudo[1125132]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8bst2M7jpWjLTq7h.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 01:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:52 nativespace-cdp sudo[1125136]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 01:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:52 nativespace-cdp sudo[1125139]: pam_unix(sudo:session): session closed for user root
Sep 23 01:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 01:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 01:09:54 nativespace-cdp sudo[1125158]: pam_unix(sudo:session): session closed for user root
Sep 23 01:16:37 nativespace-cdp sshd[1126995]: Connection closed by 159.100.136.21 port 49914 [preauth]
Sep 23 01:21:33 nativespace-cdp sshd[1128139]: Connection closed by 159.100.136.21 port 59388 [preauth]
Sep 23 01:26:33 nativespace-cdp sshd[1129480]: Connection closed by 159.100.136.21 port 40554 [preauth]
Sep 23 01:31:33 nativespace-cdp sshd[1131032]: Connection closed by 159.100.136.21 port 49442 [preauth]
Sep 23 01:36:35 nativespace-cdp sshd[1132156]: Connection closed by 159.100.136.21 port 58970 [preauth]
Sep 23 01:41:33 nativespace-cdp sshd[1133355]: Connection closed by 159.100.136.21 port 39408 [preauth]
Sep 23 01:46:34 nativespace-cdp sshd[1134614]: Connection closed by 159.100.136.21 port 48574 [preauth]
Sep 23 01:51:33 nativespace-cdp sshd[1135851]: Connection closed by 159.100.136.21 port 57478 [preauth]
Sep 23 01:56:34 nativespace-cdp sshd[1136962]: Connection closed by 159.100.136.21 port 38988 [preauth]
Sep 23 02:01:33 nativespace-cdp sshd[1138315]: Connection closed by 159.100.136.21 port 47752 [preauth]
Sep 23 02:06:33 nativespace-cdp sshd[1139446]: Connection closed by 159.100.136.21 port 57010 [preauth]
Sep 23 02:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 02:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:38 nativespace-cdp sudo[1140054]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 02:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:38 nativespace-cdp sudo[1140058]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 02:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:39 nativespace-cdp sudo[1140061]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 02:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:39 nativespace-cdp sudo[1140068]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 02:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:41 nativespace-cdp sudo[1140071]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 02:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:41 nativespace-cdp sudo[1140082]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 02:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:41 nativespace-cdp sudo[1140086]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 02:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:41 nativespace-cdp sudo[1140090]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 02:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:41 nativespace-cdp sudo[1140093]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 02:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:41 nativespace-cdp sudo[1140096]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 02:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:41 nativespace-cdp sudo[1140100]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 02:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:43 nativespace-cdp sudo[1140110]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 02:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:43 nativespace-cdp sudo[1140114]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=leereyn1 user-2=stephani user-3=still user-4=agproduc user-5=hodgesonweb user-6=theblack user-7=spectrum user-8=jarvisin user-9=ulsukarm user-10=maflemin user-11=lbscrmod user-12=connect9 user-13=athenare user-14=vantagep user-15=foundation user-16=booff user-17=markward user-18=magichat user-19=lbhyisi user-20=hhdugcor user-21=ptkxhsbt user-22=dickemery123 user-23=martsblo user-24=musorguk user-25=megacards user-26=wilsonsw user-27=sarafoundation user-28=atestord user-29=strathar user-30=brmrjxl user-31=lakesan1 user-32=thqkgnbz user-33=connectedshoppin user-34=ianrayne user-35=accooper user-36=carsinyo user-37=fetch user-38=hubmaster user-39=elecleis user-40=milloyco user-41=gilpin user-42=southlon user-43=highlegh user-44=firstred user-45=costestimatorco user-46=firstrel user-47=clarkass
Sep 23 02:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=opaiscyx user-49=coursemc user-50=firstres user-51=seftvta user-52=jonhartl user-53=ultbcrra user-54=nativene user-55=stuartge user-56=askhform user-57=innovat1 user-58=skyfirec user-59=alexadmin user-60=bemadonn user-61=ggaaorgu user-62=belle user-63=newstoda user-64=bedfords user-65=battlere user-66=oneoarco user-67=firstre2 user-68=vivienn1 user-69=brighto1 user-70=nstriton user-71=dhyana user-72=eatspam user-73=darkstar user-74=beauty user-75=nsceres user-76=burydropin user-77=fawcettd user-78=steve user-79=zebrapho user-80=bwppodcast user-81=sibtoncc user-82=asandcoc user-83=courseme user-84=eugincou user-85=hirefootballgame user-86=paulmca1 user-87=howardon user-88=pugwash user-89=cwsocial user-90=reliable user-91=ninejimm user-92=cathski user-93=cambria1 user-94=barbersh user-95=tigerlet user-96=hidden user-97=nomistakes user-98=smrszyqg user-99=isleofwi user-100=ctedorgu user-101=philmcph
Sep 23 02:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=firstre5 user-103=steakbridieme user-104=donnychicago user-105=lkpier user-106=health2045 user-107=fortunaz user-108=leftie user-109=foods user-110=nscdp user-111=romaldki user-112=branko user-113=outdoorc user-114=hodgsonmail user-115=ranxterc user-116=onlycont user-117=attlebor user-118=lucy user-119=careers user-120=nbhavers user-121=david user-122=mcdermos user-123=chrisdal user-124=jennimil user-125=tomandle user-126=design user-127=kategilpin user-128=ladburyp user-129=dancinggardener user-130=stagingerris user-131=nvihkvu user-132=sketchy user-133=cath user-134=havantho user-135=what user-136=oubpgvbx user-137=tstardom user-138=sosevalu user-139=crrtipdl user-140=bakery user-141=boldover user-142=nove feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 02:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 02:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:44 nativespace-cdp sudo[1140119]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 02:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:44 nativespace-cdp sudo[1140127]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uM5VSegMRHgk6UVH.~
Sep 23 02:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:44 nativespace-cdp sudo[1140130]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uM5VSegMRHgk6UVH.~'
Sep 23 02:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:44 nativespace-cdp sudo[1140133]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uM5VSegMRHgk6UVH.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 02:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:44 nativespace-cdp sudo[1140137]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 02:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:44 nativespace-cdp sudo[1140140]: pam_unix(sudo:session): session closed for user root
Sep 23 02:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 02:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 02:09:45 nativespace-cdp sudo[1140161]: pam_unix(sudo:session): session closed for user root
Sep 23 02:11:33 nativespace-cdp sshd[1140789]: Connection closed by 159.100.136.21 port 37964 [preauth]
Sep 23 02:16:33 nativespace-cdp sshd[1142149]: Connection closed by 159.100.136.21 port 47830 [preauth]
Sep 23 02:21:33 nativespace-cdp sshd[1143361]: Connection closed by 159.100.136.21 port 56084 [preauth]
Sep 23 02:26:33 nativespace-cdp sshd[1144480]: Connection closed by 159.100.136.21 port 37506 [preauth]
Sep 23 02:31:33 nativespace-cdp sshd[1145937]: Connection closed by 159.100.136.21 port 47082 [preauth]
Sep 23 02:36:33 nativespace-cdp sshd[1147049]: Connection closed by 159.100.136.21 port 56698 [preauth]
Sep 23 02:41:34 nativespace-cdp sshd[1148185]: Connection closed by 159.100.136.21 port 37660 [preauth]
Sep 23 02:46:33 nativespace-cdp sshd[1149394]: Connection closed by 159.100.136.21 port 46976 [preauth]
Sep 23 02:51:33 nativespace-cdp sshd[1150638]: Connection closed by 159.100.136.21 port 56490 [preauth]
Sep 23 02:56:08 nativespace-cdp sshd[1151745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.70.198  user=root
Sep 23 02:56:08 nativespace-cdp sshd[1151745]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 02:56:10 nativespace-cdp sshd[1151745]: Failed password for root from 36.67.70.198 port 47414 ssh2
Sep 23 02:56:11 nativespace-cdp sshd[1151745]: Received disconnect from 36.67.70.198 port 47414:11: Bye Bye [preauth]
Sep 23 02:56:11 nativespace-cdp sshd[1151745]: Disconnected from 36.67.70.198 port 47414 [preauth]
Sep 23 02:56:33 nativespace-cdp sshd[1151827]: Connection closed by 159.100.136.21 port 37486 [preauth]
Sep 23 02:58:48 nativespace-cdp sshd[1152434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.70.198  user=david
Sep 23 02:58:50 nativespace-cdp sshd[1152434]: Failed password for david from 36.67.70.198 port 39034 ssh2
Sep 23 02:58:50 nativespace-cdp sshd[1152434]: Received disconnect from 36.67.70.198 port 39034:11: Bye Bye [preauth]
Sep 23 02:58:50 nativespace-cdp sshd[1152434]: Disconnected from 36.67.70.198 port 39034 [preauth]
Sep 23 02:59:34 nativespace-cdp sshd[1152590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.70.198  user=root
Sep 23 02:59:34 nativespace-cdp sshd[1152590]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 02:59:36 nativespace-cdp sshd[1152590]: Failed password for root from 36.67.70.198 port 47124 ssh2
Sep 23 02:59:36 nativespace-cdp sshd[1152590]: Received disconnect from 36.67.70.198 port 47124:11: Bye Bye [preauth]
Sep 23 02:59:36 nativespace-cdp sshd[1152590]: Disconnected from 36.67.70.198 port 47124 [preauth]
Sep 23 03:01:36 nativespace-cdp sshd[1153274]: Connection closed by 159.100.136.21 port 46772 [preauth]
Sep 23 03:06:33 nativespace-cdp sshd[1154401]: Connection closed by 159.100.136.21 port 56568 [preauth]
Sep 23 03:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 03:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:42 nativespace-cdp sudo[1155045]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 03:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:42 nativespace-cdp sudo[1155050]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 03:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:43 nativespace-cdp sudo[1155053]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 03:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:43 nativespace-cdp sudo[1155061]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 03:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:44 nativespace-cdp sudo[1155064]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:45 nativespace-cdp sudo[1155073]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:45 nativespace-cdp sudo[1155076]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:45 nativespace-cdp sudo[1155080]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:45 nativespace-cdp sudo[1155083]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:45 nativespace-cdp sudo[1155086]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:45 nativespace-cdp sudo[1155089]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 03:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:55 nativespace-cdp sudo[1155121]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 03:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:55 nativespace-cdp sudo[1155125]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=alexadmin user-2=skyfirec user-3=askhform user-4=stuartge user-5=innovat1 user-6=nativene user-7=nstriton user-8=brighto1 user-9=oneoarco user-10=battlere user-11=vivienn1 user-12=firstre2 user-13=bedfords user-14=bemadonn user-15=newstoda user-16=ggaaorgu user-17=belle user-18=elecleis user-19=gilpin user-20=milloyco user-21=fetch user-22=carsinyo user-23=hubmaster user-24=ianrayne user-25=accooper user-26=thqkgnbz user-27=connectedshoppin user-28=firstres user-29=ultbcrra user-30=seftvta user-31=jonhartl user-32=coursemc user-33=opaiscyx user-34=costestimatorco user-35=firstrel user-36=clarkass user-37=highlegh user-38=southlon user-39=firstred user-40=martsblo user-41=ptkxhsbt user-42=dickemery123 user-43=hhdugcor user-44=lbhyisi user-45=magichat user-46=lakesan1 user-47=brmrjxl
Sep 23 03:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=atestord user-49=sarafoundation user-50=strathar user-51=wilsonsw user-52=megacards user-53=musorguk user-54=jarvisin user-55=theblack user-56=hodgesonweb user-57=spectrum user-58=agproduc user-59=still user-60=leereyn1 user-61=stephani user-62=booff user-63=foundation user-64=markward user-65=lbscrmod user-66=maflemin user-67=vantagep user-68=connect9 user-69=athenare user-70=ulsukarm user-71=what user-72=oubpgvbx user-73=tstardom user-74=nvihkvu user-75=havantho user-76=cath user-77=sketchy user-78=kategilpin user-79=dancinggardener user-80=stagingerris user-81=ladburyp user-82=design user-83=nove user-84=boldover user-85=crrtipdl user-86=sosevalu user-87=bakery user-88=lucy user-89=attlebor user-90=onlycont user-91=branko user-92=hodgsonmail user-93=outdoorc user-94=ranxterc user-95=romaldki user-96=tomandle user-97=jennimil user-98=mcdermos user-99=chrisdal user-100=david user-101=careers
Sep 23 03:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=nbhavers user-103=reliable user-104=ninejimm user-105=cambria1 user-106=cathski user-107=cwsocial user-108=howardon user-109=pugwash user-110=paulmca1 user-111=hirefootballgame user-112=courseme user-113=eugincou user-114=leftie user-115=foods user-116=fortunaz user-117=health2045 user-118=nscdp user-119=donnychicago user-120=firstre5 user-121=steakbridieme user-122=ctedorgu user-123=philmcph user-124=lkpier user-125=smrszyqg user-126=isleofwi user-127=tigerlet user-128=barbersh user-129=nomistakes user-130=hidden user-131=fawcettd user-132=burydropin user-133=nsceres user-134=darkstar user-135=eatspam user-136=beauty user-137=dhyana user-138=sibtoncc user-139=asandcoc user-140=zebrapho user-141=bwppodcast user-142=steve feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 23 03:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 03:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:56 nativespace-cdp sudo[1155130]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 03:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:56 nativespace-cdp sudo[1155136]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ynw2LHgBQYhS51fn.~
Sep 23 03:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:56 nativespace-cdp sudo[1155139]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ynw2LHgBQYhS51fn.~'
Sep 23 03:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:56 nativespace-cdp sudo[1155142]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ynw2LHgBQYhS51fn.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 03:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:56 nativespace-cdp sudo[1155146]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 03:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:56 nativespace-cdp sudo[1155149]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 23 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:57 nativespace-cdp sudo[1155152]: pam_unix(sudo:session): session closed for user root
Sep 23 03:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 03:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 03:09:58 nativespace-cdp sudo[1155174]: pam_unix(sudo:session): session closed for user root
Sep 23 03:11:37 nativespace-cdp sshd[1155753]: Connection closed by 159.100.136.21 port 37656 [preauth]
Sep 23 03:16:33 nativespace-cdp sshd[1157022]: Connection closed by 159.100.136.21 port 47114 [preauth]
Sep 23 03:21:33 nativespace-cdp sshd[1158230]: Connection closed by 159.100.136.21 port 56616 [preauth]
Sep 23 03:26:33 nativespace-cdp sshd[1159282]: Connection closed by 159.100.136.21 port 37880 [preauth]
Sep 23 03:31:35 nativespace-cdp sshd[1160599]: Connection closed by 159.100.136.21 port 45998 [preauth]
Sep 23 03:36:33 nativespace-cdp sshd[1161696]: Connection closed by 159.100.136.21 port 55008 [preauth]
Sep 23 03:41:36 nativespace-cdp sshd[1162926]: Connection closed by 159.100.136.21 port 36066 [preauth]
Sep 23 03:46:36 nativespace-cdp sshd[1164255]: Connection closed by 159.100.136.21 port 45246 [preauth]
Sep 23 03:51:33 nativespace-cdp sshd[1165450]: Connection closed by 159.100.136.21 port 54734 [preauth]
Sep 23 03:56:34 nativespace-cdp sshd[1166430]: Connection closed by 159.100.136.21 port 36270 [preauth]
Sep 23 04:01:33 nativespace-cdp sshd[1167821]: Connection closed by 159.100.136.21 port 45182 [preauth]
Sep 23 04:06:35 nativespace-cdp sshd[1168846]: Connection closed by 159.100.136.21 port 53242 [preauth]
Sep 23 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:38 nativespace-cdp sudo[1169389]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:38 nativespace-cdp sudo[1169392]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:39 nativespace-cdp sudo[1169395]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:39 nativespace-cdp sudo[1169400]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:42 nativespace-cdp sudo[1169403]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:42 nativespace-cdp sudo[1169415]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:42 nativespace-cdp sudo[1169418]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:42 nativespace-cdp sudo[1169421]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:42 nativespace-cdp sudo[1169425]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:42 nativespace-cdp sudo[1169428]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:42 nativespace-cdp sudo[1169431]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 04:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:47 nativespace-cdp sudo[1169452]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 04:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:47 nativespace-cdp sudo[1169456]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bemadonn user-2=newstoda user-3=ggaaorgu user-4=belle user-5=bedfords user-6=oneoarco user-7=battlere user-8=vivienn1 user-9=firstre2 user-10=nstriton user-11=brighto1 user-12=nativene user-13=askhform user-14=stuartge user-15=innovat1 user-16=skyfirec user-17=alexadmin user-18=highlegh user-19=southlon user-20=firstred user-21=costestimatorco user-22=clarkass user-23=firstrel user-24=coursemc user-25=opaiscyx user-26=firstres user-27=ultbcrra user-28=jonhartl user-29=seftvta user-30=thqkgnbz user-31=connectedshoppin user-32=ianrayne user-33=accooper user-34=fetch user-35=carsinyo user-36=hubmaster user-37=elecleis user-38=milloyco user-39=gilpin user-40=megacards user-41=musorguk user-42=wilsonsw user-43=atestord user-44=sarafoundation user-45=strathar user-46=brmrjxl user-47=lakesan1
Sep 23 04:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=magichat user-49=hhdugcor user-50=lbhyisi user-51=ptkxhsbt user-52=dickemery123 user-53=martsblo user-54=ulsukarm user-55=lbscrmod user-56=maflemin user-57=vantagep user-58=athenare user-59=connect9 user-60=booff user-61=markward user-62=foundation user-63=leereyn1 user-64=stephani user-65=agproduc user-66=still user-67=hodgesonweb user-68=theblack user-69=spectrum user-70=jarvisin user-71=crrtipdl user-72=sosevalu user-73=bakery user-74=boldover user-75=nove user-76=design user-77=kategilpin user-78=stagingerris user-79=dancinggardener user-80=ladburyp user-81=nvihkvu user-82=havantho user-83=cath user-84=sketchy user-85=what user-86=oubpgvbx user-87=tstardom user-88=david user-89=nbhavers user-90=careers user-91=mcdermos user-92=chrisdal user-93=jennimil user-94=tomandle user-95=romaldki user-96=branko user-97=ranxterc user-98=hodgsonmail user-99=outdoorc user-100=onlycont user-101=lucy
Sep 23 04:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=attlebor user-103=tigerlet user-104=barbersh user-105=nomistakes user-106=hidden user-107=isleofwi user-108=smrszyqg user-109=firstre5 user-110=donnychicago user-111=steakbridieme user-112=philmcph user-113=ctedorgu user-114=lkpier user-115=foods user-116=leftie user-117=health2045 user-118=fortunaz user-119=nscdp user-120=courseme user-121=eugincou user-122=hirefootballgame user-123=cwsocial user-124=howardon user-125=paulmca1 user-126=pugwash user-127=reliable user-128=ninejimm user-129=cambria1 user-130=cathski user-131=steve user-132=zebrapho user-133=bwppodcast user-134=sibtoncc user-135=asandcoc user-136=dhyana user-137=darkstar user-138=eatspam user-139=beauty user-140=nsceres user-141=fawcettd user-142=burydropin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 23 04:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 04:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:48 nativespace-cdp sudo[1169462]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 04:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:48 nativespace-cdp sudo[1169467]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pXHeUWfE6eqUxNmP.~
Sep 23 04:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:48 nativespace-cdp sudo[1169470]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pXHeUWfE6eqUxNmP.~'
Sep 23 04:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:48 nativespace-cdp sudo[1169474]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pXHeUWfE6eqUxNmP.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 04:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:48 nativespace-cdp sudo[1169478]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 04:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:48 nativespace-cdp sudo[1169482]: pam_unix(sudo:session): session closed for user root
Sep 23 04:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 04:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:09:50 nativespace-cdp sudo[1169499]: pam_unix(sudo:session): session closed for user root
Sep 23 04:11:33 nativespace-cdp sshd[1170092]: Connection closed by 159.100.136.21 port 33868 [preauth]
Sep 23 04:16:34 nativespace-cdp sshd[1171413]: Connection closed by 159.100.136.21 port 43634 [preauth]
Sep 23 04:21:33 nativespace-cdp sshd[1172786]: Connection closed by 159.100.136.21 port 53056 [preauth]
Sep 23 04:26:34 nativespace-cdp sshd[1173889]: Connection closed by 159.100.136.21 port 34642 [preauth]
Sep 23 04:31:35 nativespace-cdp sshd[1175410]: Connection closed by 159.100.136.21 port 43360 [preauth]
Sep 23 04:36:35 nativespace-cdp sshd[1177337]: Connection closed by 159.100.136.21 port 52414 [preauth]
Sep 23 04:36:40 nativespace-cdp sshd[1177407]: Invalid user ubuntu from 1.232.29.63 port 47648
Sep 23 04:36:40 nativespace-cdp sshd[1177407]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 04:36:41 nativespace-cdp sshd[1177407]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 04:36:41 nativespace-cdp sshd[1177407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.232.29.63
Sep 23 04:36:42 nativespace-cdp sshd[1177407]: Failed password for invalid user ubuntu from 1.232.29.63 port 47648 ssh2
Sep 23 04:36:43 nativespace-cdp sshd[1177407]: Received disconnect from 1.232.29.63 port 47648:11: Bye Bye [preauth]
Sep 23 04:36:43 nativespace-cdp sshd[1177407]: Disconnected from 1.232.29.63 port 47648 [preauth]
Sep 23 04:38:11 nativespace-cdp sshd[1178047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.137.240  user=root
Sep 23 04:38:11 nativespace-cdp sshd[1178047]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 04:38:13 nativespace-cdp sshd[1178047]: Failed password for root from 51.68.137.240 port 48218 ssh2
Sep 23 04:38:13 nativespace-cdp sshd[1178047]: Received disconnect from 51.68.137.240 port 48218:11: Bye Bye [preauth]
Sep 23 04:38:13 nativespace-cdp sshd[1178047]: Disconnected from 51.68.137.240 port 48218 [preauth]
Sep 23 04:40:46 nativespace-cdp sshd[1178895]: Invalid user test from 118.193.39.171 port 55940
Sep 23 04:40:46 nativespace-cdp sshd[1178895]: input_userauth_request: invalid user test [preauth]
Sep 23 04:40:46 nativespace-cdp sshd[1178895]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 04:40:46 nativespace-cdp sshd[1178895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.39.171
Sep 23 04:40:48 nativespace-cdp sshd[1178895]: Failed password for invalid user test from 118.193.39.171 port 55940 ssh2
Sep 23 04:40:48 nativespace-cdp sshd[1178895]: Received disconnect from 118.193.39.171 port 55940:11: Bye Bye [preauth]
Sep 23 04:40:48 nativespace-cdp sshd[1178895]: Disconnected from 118.193.39.171 port 55940 [preauth]
Sep 23 04:41:33 nativespace-cdp sshd[1179214]: Connection closed by 159.100.136.21 port 60784 [preauth]
Sep 23 04:42:16 nativespace-cdp sshd[1179373]: Invalid user user from 1.232.29.63 port 44296
Sep 23 04:42:16 nativespace-cdp sshd[1179373]: input_userauth_request: invalid user user [preauth]
Sep 23 04:42:16 nativespace-cdp sshd[1179373]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 04:42:16 nativespace-cdp sshd[1179373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.232.29.63
Sep 23 04:42:17 nativespace-cdp sshd[1179373]: Failed password for invalid user user from 1.232.29.63 port 44296 ssh2
Sep 23 04:42:18 nativespace-cdp sshd[1179373]: Received disconnect from 1.232.29.63 port 44296:11: Bye Bye [preauth]
Sep 23 04:42:18 nativespace-cdp sshd[1179373]: Disconnected from 1.232.29.63 port 44296 [preauth]
Sep 23 04:42:42 nativespace-cdp sshd[1179445]: Invalid user acer from 118.193.39.171 port 43144
Sep 23 04:42:42 nativespace-cdp sshd[1179445]: input_userauth_request: invalid user acer [preauth]
Sep 23 04:42:42 nativespace-cdp sshd[1179445]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 04:42:42 nativespace-cdp sshd[1179445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.39.171
Sep 23 04:42:44 nativespace-cdp sshd[1179445]: Failed password for invalid user acer from 118.193.39.171 port 43144 ssh2
Sep 23 04:42:44 nativespace-cdp sshd[1179445]: Received disconnect from 118.193.39.171 port 43144:11: Bye Bye [preauth]
Sep 23 04:42:44 nativespace-cdp sshd[1179445]: Disconnected from 118.193.39.171 port 43144 [preauth]
Sep 23 04:42:59 nativespace-cdp sshd[1179485]: Invalid user sysadmin from 1.232.29.63 port 56746
Sep 23 04:42:59 nativespace-cdp sshd[1179485]: input_userauth_request: invalid user sysadmin [preauth]
Sep 23 04:42:59 nativespace-cdp sshd[1179485]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 04:42:59 nativespace-cdp sshd[1179485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.232.29.63
Sep 23 04:43:01 nativespace-cdp sshd[1179485]: Failed password for invalid user sysadmin from 1.232.29.63 port 56746 ssh2
Sep 23 04:43:35 nativespace-cdp sshd[1179612]: Invalid user test01 from 118.193.39.171 port 49034
Sep 23 04:43:35 nativespace-cdp sshd[1179612]: input_userauth_request: invalid user test01 [preauth]
Sep 23 04:43:35 nativespace-cdp sshd[1179612]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 04:43:35 nativespace-cdp sshd[1179612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.39.171
Sep 23 04:43:37 nativespace-cdp sshd[1179612]: Failed password for invalid user test01 from 118.193.39.171 port 49034 ssh2
Sep 23 04:43:50 nativespace-cdp sshd[1179803]: Invalid user acer from 51.68.137.240 port 54510
Sep 23 04:43:50 nativespace-cdp sshd[1179803]: input_userauth_request: invalid user acer [preauth]
Sep 23 04:43:50 nativespace-cdp sshd[1179803]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 04:43:50 nativespace-cdp sshd[1179803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.137.240
Sep 23 04:43:52 nativespace-cdp sshd[1179803]: Failed password for invalid user acer from 51.68.137.240 port 54510 ssh2
Sep 23 04:43:52 nativespace-cdp sshd[1179803]: Received disconnect from 51.68.137.240 port 54510:11: Bye Bye [preauth]
Sep 23 04:43:52 nativespace-cdp sshd[1179803]: Disconnected from 51.68.137.240 port 54510 [preauth]
Sep 23 04:44:28 nativespace-cdp sshd[1179921]: Invalid user support from 51.68.137.240 port 39460
Sep 23 04:44:28 nativespace-cdp sshd[1179921]: input_userauth_request: invalid user support [preauth]
Sep 23 04:44:28 nativespace-cdp sshd[1179921]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 04:44:28 nativespace-cdp sshd[1179921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.137.240
Sep 23 04:44:30 nativespace-cdp sshd[1179921]: Failed password for invalid user support from 51.68.137.240 port 39460 ssh2
Sep 23 04:44:30 nativespace-cdp sshd[1179921]: Received disconnect from 51.68.137.240 port 39460:11: Bye Bye [preauth]
Sep 23 04:44:30 nativespace-cdp sshd[1179921]: Disconnected from 51.68.137.240 port 39460 [preauth]
Sep 23 04:46:35 nativespace-cdp sshd[1180666]: Connection closed by 159.100.136.21 port 41366 [preauth]
Sep 23 04:51:34 nativespace-cdp sshd[1181749]: Connection closed by 159.100.136.21 port 50338 [preauth]
Sep 23 04:56:33 nativespace-cdp sshd[1182800]: Connection closed by 159.100.136.21 port 58726 [preauth]
Sep 23 04:56:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 04:56:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:56:42 nativespace-cdp sudo[1182822]: pam_unix(sudo:session): session closed for user root
Sep 23 04:56:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 04:56:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:56:42 nativespace-cdp sudo[1182829]: pam_unix(sudo:session): session closed for user root
Sep 23 04:56:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 04:56:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:56:46 nativespace-cdp sudo[1182846]: pam_unix(sudo:session): session closed for user root
Sep 23 04:56:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=costestimatorco user-2=clarkass user-3=firstrel user-4=highlegh user-5=southlon user-6=firstred user-7=firstres user-8=ultbcrra user-9=jonhartl user-10=seftvta user-11=coursemc user-12=opaiscyx user-13=ianrayne user-14=accooper user-15=thqkgnbz user-16=connectedshoppin user-17=elecleis user-18=gilpin user-19=milloyco user-20=fetch user-21=carsinyo user-22=hubmaster user-23=bedfords user-24=bemadonn user-25=newstoda user-26=belle user-27=ggaaorgu user-28=nstriton user-29=brighto1 user-30=oneoarco user-31=battlere user-32=vivienn1 user-33=firstre2 user-34=askhform user-35=stuartge user-36=innovat1 user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=booff user-42=markward user-43=foundation user-44=lbscrmod user-45=maflemin user-46=vantagep user-47=athenare user-48=connect9
Sep 23 04:56:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=agproduc user-50=still user-51=leereyn1 user-52=stephani user-53=jarvisin user-54=theblack user-55=hodgesonweb user-56=spectrum user-57=wilsonsw user-58=megacards user-59=musorguk user-60=brmrjxl user-61=lakesan1 user-62=atestord user-63=sarafoundation user-64=strathar user-65=hhdugcor user-66=lbhyisi user-67=magichat user-68=martsblo user-69=ptkxhsbt user-70=dickemery123 user-71=mcdermos user-72=chrisdal user-73=david user-74=nbhavers user-75=careers user-76=tomandle user-77=jennimil user-78=branko user-79=outdoorc user-80=hodgsonmail user-81=ranxterc user-82=romaldki user-83=lucy user-84=attlebor user-85=onlycont user-86=crrtipdl user-87=sosevalu user-88=bakery user-89=nove user-90=boldover user-91=kategilpin user-92=dancinggardener user-93=stagingerris user-94=ladburyp user-95=design user-96=what user-97=oubpgvbx user-98=tstardom user-99=nvihkvu user-100=havantho user-101=cath user-102=sketchy
Sep 23 04:56:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=zebrapho user-104=bwppodcast user-105=steve user-106=asandcoc user-107=sibtoncc user-108=darkstar user-109=eatspam user-110=beauty user-111=dhyana user-112=fawcettd user-113=burydropin user-114=nsceres user-115=smrszyqg user-116=isleofwi user-117=tigerlet user-118=barbersh user-119=nomistakes user-120=hidden user-121=leftie user-122=foods user-123=fortunaz user-124=health2045 user-125=nscdp user-126=firstre5 user-127=donnychicago user-128=steakbridieme user-129=philmcph user-130=ctedorgu user-131=lkpier user-132=hirefootballgame user-133=courseme user-134=eugincou user-135=ninejimm user-136=reliable user-137=cambria1 user-138=cathski user-139=cwsocial user-140=howardon user-141=pugwash user-142=paulmca1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 04:56:46 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 04:56:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:56:47 nativespace-cdp sudo[1182851]: pam_unix(sudo:session): session closed for user root
Sep 23 04:56:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 23 04:56:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:56:49 nativespace-cdp sudo[1182858]: pam_unix(sudo:session): session closed for user root
Sep 23 04:56:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 23 04:56:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:56:49 nativespace-cdp sudo[1182865]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 23 04:57:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 04:57:14 nativespace-cdp sudo[1182989]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 04:57:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 23 04:57:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:14 nativespace-cdp sudo[1182997]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 23 04:57:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:16 nativespace-cdp sudo[1183005]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 23 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:18 nativespace-cdp sudo[1183013]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 23 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:18 nativespace-cdp sudo[1183025]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 23 04:57:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:20 nativespace-cdp sudo[1183039]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 23 04:57:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:25 nativespace-cdp sudo[1183047]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 23 04:57:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:25 nativespace-cdp sudo[1183063]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 23 04:57:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:26 nativespace-cdp sudo[1183067]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 23 04:57:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:31 nativespace-cdp sudo[1183138]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 23 04:57:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 04:57:34 nativespace-cdp sudo[1183271]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 04:57:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 23 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 23 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 23 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:57:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 04:57:34 nativespace-cdp sudo[1183278]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 04:57:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 23 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 23 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 23 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:57:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 04:57:35 nativespace-cdp sudo[1183289]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 04:57:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 23 04:57:35 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 23 04:57:35 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 23 04:57:35 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:57:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 04:57:37 nativespace-cdp sudo[1183296]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 23 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 04:57:46 nativespace-cdp sudo[1183412]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 04:57:46 nativespace-cdp sudo[1183418]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 04:57:46 nativespace-cdp sudo[1183425]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 23 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 04:57:46 nativespace-cdp sudo[1183431]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 04:57:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 23 04:57:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:49 nativespace-cdp sudo[1183471]: pam_unix(sudo:session): session closed for user root
Sep 23 04:57:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 23 04:57:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:57:49 nativespace-cdp sudo[1183476]: pam_unix(sudo:session): session closed for user root
Sep 23 04:59:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 23 04:59:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 04:59:01 nativespace-cdp sudo[1183884]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 04:59:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 23 04:59:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:59:02 nativespace-cdp sudo[1183891]: pam_unix(sudo:session): session closed for user root
Sep 23 04:59:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 23 04:59:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:59:03 nativespace-cdp sudo[1183898]: pam_unix(sudo:session): session closed for user root
Sep 23 04:59:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 23 04:59:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:59:04 nativespace-cdp sudo[1183902]: pam_unix(sudo:session): session closed for user root
Sep 23 04:59:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 23 04:59:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:59:04 nativespace-cdp sudo[1183951]: pam_unix(sudo:session): session closed for user root
Sep 23 04:59:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 23 04:59:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:59:07 nativespace-cdp sudo[1183969]: pam_unix(sudo:session): session closed for user root
Sep 23 04:59:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 23 04:59:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:59:08 nativespace-cdp sudo[1183974]: pam_unix(sudo:session): session closed for user root
Sep 23 04:59:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 23 04:59:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:59:15 nativespace-cdp sudo[1184043]: pam_unix(sudo:session): session closed for user root
Sep 23 04:59:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 23 04:59:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 04:59:17 nativespace-cdp sudo[1184097]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 04:59:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 23 04:59:17 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 23 04:59:17 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 23 04:59:17 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:59:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 04:59:18 nativespace-cdp sudo[1184103]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 04:59:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 23 04:59:18 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 23 04:59:18 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 23 04:59:18 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:59:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 04:59:38 nativespace-cdp sudo[1184112]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 04:59:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 23 04:59:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 04:59:47 nativespace-cdp sudo[1184285]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 04:59:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 23 04:59:47 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 23 04:59:47 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 23 04:59:47 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:59:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 04:59:47 nativespace-cdp sudo[1184291]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 04:59:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 23 04:59:47 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 23 04:59:47 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 23 04:59:47 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 04:59:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 04:59:47 nativespace-cdp sudo[1184297]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 23 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:59:50 nativespace-cdp sudo[1184335]: pam_unix(sudo:session): session closed for user root
Sep 23 04:59:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 23 04:59:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 04:59:50 nativespace-cdp sudo[1184341]: pam_unix(sudo:session): session closed for user root
Sep 23 05:00:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 23 05:00:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 05:00:51 nativespace-cdp sudo[1184806]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 05:00:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 23 05:00:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:00:52 nativespace-cdp sudo[1184812]: pam_unix(sudo:session): session closed for user root
Sep 23 05:00:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 23 05:00:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:00:53 nativespace-cdp sudo[1184822]: pam_unix(sudo:session): session closed for user root
Sep 23 05:00:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 23 05:00:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:00:53 nativespace-cdp sudo[1184828]: pam_unix(sudo:session): session closed for user root
Sep 23 05:00:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 23 05:00:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:00:56 nativespace-cdp sudo[1184847]: pam_unix(sudo:session): session closed for user root
Sep 23 05:00:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 23 05:00:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:00:56 nativespace-cdp sudo[1184852]: pam_unix(sudo:session): session closed for user root
Sep 23 05:01:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 23 05:01:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:01:02 nativespace-cdp sudo[1185035]: pam_unix(sudo:session): session closed for user root
Sep 23 05:01:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 23 05:01:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 05:01:07 nativespace-cdp sudo[1185100]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 05:01:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 23 05:01:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 23 05:01:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 23 05:01:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:01:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 05:01:07 nativespace-cdp sudo[1185107]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 05:01:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 23 05:01:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 23 05:01:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 23 05:01:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:01:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 05:01:20 nativespace-cdp sudo[1185113]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 23 05:01:20 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 23 05:01:20 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 23 05:01:20 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 05:01:22 nativespace-cdp sudo[1185148]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 23 05:01:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 05:01:28 nativespace-cdp sudo[1185268]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:01:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 05:01:28 nativespace-cdp sudo[1185274]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:01:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 05:01:28 nativespace-cdp sudo[1185280]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 23 05:01:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:01:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 05:01:28 nativespace-cdp sudo[1185288]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 05:01:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 23 05:01:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:01:30 nativespace-cdp sudo[1185325]: pam_unix(sudo:session): session closed for user root
Sep 23 05:01:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 23 05:01:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:01:31 nativespace-cdp sudo[1185331]: pam_unix(sudo:session): session closed for user root
Sep 23 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 23 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:01:32 nativespace-cdp sudo[1185347]: pam_unix(sudo:session): session closed for user root
Sep 23 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 23 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:01:32 nativespace-cdp sudo[1185352]: pam_unix(sudo:session): session closed for user root
Sep 23 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 23 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 23 05:01:33 nativespace-cdp sudo[1185363]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 23 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 23 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:01:33 nativespace-cdp sudo[1185369]: pam_unix(sudo:session): session closed for user root
Sep 23 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 23 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:01:34 nativespace-cdp sudo[1185374]: pam_unix(sudo:session): session closed for user root
Sep 23 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 23 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:01:34 nativespace-cdp sudo[1185379]: pam_unix(sudo:session): session closed for user root
Sep 23 05:01:36 nativespace-cdp sshd[1185395]: Connection closed by 159.100.136.21 port 37636 [preauth]
Sep 23 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 23 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 05:01:59 nativespace-cdp sudo[1185482]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 23 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:02:00 nativespace-cdp sudo[1185489]: pam_unix(sudo:session): session closed for user root
Sep 23 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 23 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:02:00 nativespace-cdp sudo[1185495]: pam_unix(sudo:session): session closed for user root
Sep 23 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 23 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:02:01 nativespace-cdp sudo[1185512]: pam_unix(sudo:session): session closed for user root
Sep 23 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 23 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:02:12 nativespace-cdp sudo[1185612]: pam_unix(sudo:session): session closed for user root
Sep 23 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 23 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 05:02:15 nativespace-cdp sudo[1185680]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 23 05:02:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 23 05:02:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 23 05:02:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 05:02:17 nativespace-cdp sudo[1185686]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 23 05:02:17 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 23 05:02:17 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 23 05:02:17 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 05:02:35 nativespace-cdp sudo[1185696]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 23 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 05:02:40 nativespace-cdp sudo[1185838]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 23 05:02:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 23 05:02:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 23 05:02:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 05:02:41 nativespace-cdp sudo[1185844]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 23 05:02:41 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 23 05:02:41 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 23 05:02:41 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 23 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 05:02:41 nativespace-cdp sudo[1185851]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 23 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:02:43 nativespace-cdp sudo[1185887]: pam_unix(sudo:session): session closed for user root
Sep 23 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 23 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:02:43 nativespace-cdp sudo[1185894]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 23 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 23 05:03:00 nativespace-cdp sudo[1185969]: pam_unix(sudo:session): session closed for user fortunaz
Sep 23 05:03:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 23 05:03:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:01 nativespace-cdp sudo[1185975]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 23 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:01 nativespace-cdp sudo[1185980]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 23 05:03:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:01 nativespace-cdp sudo[1185995]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 23 05:03:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:04 nativespace-cdp sudo[1186014]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 23 05:03:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:04 nativespace-cdp sudo[1186020]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 23 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:09 nativespace-cdp sudo[1186080]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=costestimatorco WpToolkitNotification send_admin_auto_updates_notification available_updates_text= available_updates_list= installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 23 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:20 nativespace-cdp sudo[1186278]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 23 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:28 nativespace-cdp sudo[1186418]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 23 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:28 nativespace-cdp sudo[1186422]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 23 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:28 nativespace-cdp sudo[1186425]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 23 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:28 nativespace-cdp sudo[1186428]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 23 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:28 nativespace-cdp sudo[1186431]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186434]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186438]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186441]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186444]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186447]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186450]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186454]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186457]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186460]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186463]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186466]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186470]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186473]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186476]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186479]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186482]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186485]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186488]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186491]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186494]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186497]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186500]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186503]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186506]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186509]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186512]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186515]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:29 nativespace-cdp sudo[1186518]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186521]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186524]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186527]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186531]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186534]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186537]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186540]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186544]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186547]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186550]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186553]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186556]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186559]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186562]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186565]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186568]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186571]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186574]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186577]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186580]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186583]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186586]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186589]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186592]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186595]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186598]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186601]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186604]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186607]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186610]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186613]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186616]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186619]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:30 nativespace-cdp sudo[1186622]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186625]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186628]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186631]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186635]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186638]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186641]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186644]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186647]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186650]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186653]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186656]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186659]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186662]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186665]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186668]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186671]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186674]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186677]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186680]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186683]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186686]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186689]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186692]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186695]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186698]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186701]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186704]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186707]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186711]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:31 nativespace-cdp sudo[1186714]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186717]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186720]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186723]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186726]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186731]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186734]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186737]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186740]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186743]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186746]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186749]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186752]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186755]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186758]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186761]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186764]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186767]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186770]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186773]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186776]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186779]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186782]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186785]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186788]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186791]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186794]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186797]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186800]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186803]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186806]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186809]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186812]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186815]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186818]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186821]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186824]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186827]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:32 nativespace-cdp sudo[1186830]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186833]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186836]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186839]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186842]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186846]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186849]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186852]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186855]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186858]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186861]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186864]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186867]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186870]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186873]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186877]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186881]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186884]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186887]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186890]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186893]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186896]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186899]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186902]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186905]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186908]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186911]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186914]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186917]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186920]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186923]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186926]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186929]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186932]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186935]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186938]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186941]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186944]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:33 nativespace-cdp sudo[1186947]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 23 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186950]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186953]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186956]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186959]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186963]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186966]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186969]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186972]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186975]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186978]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186981]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186984]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186987]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186991]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186994]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1186997]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187000]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187003]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187006]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187010]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187014]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187017]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187020]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187024]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187027]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187030]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187034]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187037]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187040]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187043]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187046]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187049]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187052]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187055]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187058]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187061]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:34 nativespace-cdp sudo[1187064]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 23 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187067]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187071]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187074]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187077]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187080]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187084]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187087]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187090]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187093]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187096]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187099]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187102]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187105]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187108]: pam_unix(sudo:session): session closed for user root
Sep 23 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 23 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:03:35 nativespace-cdp sudo[1187111]: pam_unix(sudo:session): session closed for user root
Sep 23 05:06:34 nativespace-cdp sshd[1187813]: Connection closed by 159.100.136.21 port 47370 [preauth]
Sep 23 05:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 05:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:41 nativespace-cdp sudo[1188369]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 05:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:41 nativespace-cdp sudo[1188373]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 05:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:42 nativespace-cdp sudo[1188377]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 05:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:42 nativespace-cdp sudo[1188381]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 05:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:44 nativespace-cdp sudo[1188384]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 05:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:44 nativespace-cdp sudo[1188394]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 05:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:44 nativespace-cdp sudo[1188397]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 05:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:44 nativespace-cdp sudo[1188400]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 05:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:44 nativespace-cdp sudo[1188403]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 05:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:44 nativespace-cdp sudo[1188406]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 05:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:44 nativespace-cdp sudo[1188409]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 05:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:52 nativespace-cdp sudo[1188436]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 05:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:52 nativespace-cdp sudo[1188441]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cambria1 user-2=cathski user-3=reliable user-4=ninejimm user-5=cwsocial user-6=paulmca1 user-7=howardon user-8=pugwash user-9=hirefootballgame user-10=eugincou user-11=courseme user-12=nscdp user-13=foods user-14=leftie user-15=fortunaz user-16=health2045 user-17=lkpier user-18=firstre5 user-19=steakbridieme user-20=donnychicago user-21=ctedorgu user-22=philmcph user-23=smrszyqg user-24=isleofwi user-25=nomistakes user-26=hidden user-27=tigerlet user-28=barbersh user-29=fawcettd user-30=burydropin user-31=nsceres user-32=beauty user-33=darkstar user-34=eatspam user-35=dhyana user-36=sibtoncc user-37=asandcoc user-38=bwppodcast user-39=zebrapho user-40=steve user-41=tstardom user-42=oubpgvbx user-43=what user-44=havantho user-45=sketchy user-46=cath user-47=nvihkvu user-48=dancinggardener
Sep 23 05:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=stagingerris user-50=ladburyp user-51=kategilpin user-52=design user-53=nove user-54=boldover user-55=bakery user-56=crrtipdl user-57=sosevalu user-58=lucy user-59=attlebor user-60=onlycont user-61=outdoorc user-62=hodgsonmail user-63=ranxterc user-64=branko user-65=romaldki user-66=tomandle user-67=jennimil user-68=chrisdal user-69=mcdermos user-70=david user-71=careers user-72=nbhavers user-73=martsblo user-74=dickemery123 user-75=ptkxhsbt user-76=hhdugcor user-77=lbhyisi user-78=magichat user-79=lakesan1 user-80=brmrjxl user-81=strathar user-82=atestord user-83=sarafoundation user-84=wilsonsw user-85=megacards user-86=musorguk user-87=jarvisin user-88=spectrum user-89=theblack user-90=hodgesonweb user-91=agproduc user-92=still user-93=stephani user-94=leereyn1 user-95=booff user-96=foundation user-97=markward user-98=vantagep user-99=connect9 user-100=athenare user-101=lbscrmod user-102=maflemin
Sep 23 05:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ulsukarm user-104=alexadmin user-105=skyfirec user-106=innovat1 user-107=askhform user-108=stuartge user-109=nativene user-110=nstriton user-111=brighto1 user-112=vivienn1 user-113=firstre2 user-114=oneoarco user-115=battlere user-116=bedfords user-117=newstoda user-118=ggaaorgu user-119=belle user-120=bemadonn user-121=gilpin user-122=milloyco user-123=elecleis user-124=hubmaster user-125=fetch user-126=carsinyo user-127=accooper user-128=ianrayne user-129=connectedshoppin user-130=thqkgnbz user-131=ultbcrra user-132=jonhartl user-133=seftvta user-134=firstres user-135=opaiscyx user-136=coursemc user-137=firstrel user-138=clarkass user-139=costestimatorco user-140=firstred user-141=highlegh user-142=southlon feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 05:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 05:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:53 nativespace-cdp sudo[1188445]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 05:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:53 nativespace-cdp sudo[1188451]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KbFjoJrz8wOTN0jW.~
Sep 23 05:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:53 nativespace-cdp sudo[1188455]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KbFjoJrz8wOTN0jW.~'
Sep 23 05:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:53 nativespace-cdp sudo[1188458]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KbFjoJrz8wOTN0jW.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 05:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:53 nativespace-cdp sudo[1188462]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 05:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:53 nativespace-cdp sudo[1188465]: pam_unix(sudo:session): session closed for user root
Sep 23 05:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 05:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 05:09:55 nativespace-cdp sudo[1188485]: pam_unix(sudo:session): session closed for user root
Sep 23 05:11:33 nativespace-cdp sshd[1188990]: Connection closed by 159.100.136.21 port 55752 [preauth]
Sep 23 05:16:34 nativespace-cdp sshd[1190439]: Connection closed by 159.100.136.21 port 36108 [preauth]
Sep 23 05:21:34 nativespace-cdp sshd[1191526]: Connection closed by 159.100.136.21 port 45622 [preauth]
Sep 23 05:26:33 nativespace-cdp sshd[1192573]: Connection closed by 159.100.136.21 port 53706 [preauth]
Sep 23 05:31:33 nativespace-cdp sshd[1193816]: Connection closed by 159.100.136.21 port 34938 [preauth]
Sep 23 05:35:08 nativespace-cdp su: pam_unix(su:session): session opened for user foundation by (uid=0)
Sep 23 05:35:09 nativespace-cdp su[1194535]: pam_unix(su:session): session closed for user foundation
Sep 23 05:36:33 nativespace-cdp sshd[1194961]: Connection closed by 159.100.136.21 port 44730 [preauth]
Sep 23 05:41:33 nativespace-cdp sshd[1196019]: Connection closed by 159.100.136.21 port 53804 [preauth]
Sep 23 05:46:33 nativespace-cdp sshd[1197245]: Connection closed by 159.100.136.21 port 34410 [preauth]
Sep 23 05:51:33 nativespace-cdp sshd[1198356]: Connection closed by 159.100.136.21 port 43458 [preauth]
Sep 23 05:56:34 nativespace-cdp sshd[1199402]: Connection closed by 159.100.136.21 port 50450 [preauth]
Sep 23 06:01:33 nativespace-cdp sshd[1200762]: Connection closed by 159.100.136.21 port 59428 [preauth]
Sep 23 06:06:33 nativespace-cdp sshd[1201800]: Connection closed by 159.100.136.21 port 41050 [preauth]
Sep 23 06:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 06:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:44 nativespace-cdp sudo[1202416]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 06:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:44 nativespace-cdp sudo[1202419]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 06:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:46 nativespace-cdp sudo[1202423]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 06:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:46 nativespace-cdp sudo[1202429]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 06:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:50 nativespace-cdp sudo[1202433]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 06:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:50 nativespace-cdp sudo[1202447]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 06:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:50 nativespace-cdp sudo[1202450]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 06:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:50 nativespace-cdp sudo[1202453]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 06:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:50 nativespace-cdp sudo[1202456]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 06:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:50 nativespace-cdp sudo[1202459]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 06:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:50 nativespace-cdp sudo[1202462]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 06:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:52 nativespace-cdp sudo[1202471]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 06:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:53 nativespace-cdp sudo[1202476]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=atestord user-2=sarafoundation user-3=strathar user-4=brmrjxl user-5=lakesan1 user-6=megacards user-7=musorguk user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=hhdugcor user-14=lbhyisi user-15=lbscrmod user-16=maflemin user-17=vantagep user-18=athenare user-19=connect9 user-20=booff user-21=foundation user-22=markward user-23=ulsukarm user-24=hodgesonweb user-25=theblack user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=agproduc user-31=still user-32=oneoarco user-33=battlere user-34=vivienn1 user-35=firstre2 user-36=nstriton user-37=brighto1 user-38=bemadonn user-39=newstoda user-40=belle user-41=ggaaorgu user-42=bedfords user-43=alexadmin user-44=skyfirec user-45=nativene user-46=stuartge user-47=askhform user-48=innovat1
Sep 23 06:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=coursemc user-50=opaiscyx user-51=firstres user-52=ultbcrra user-53=seftvta user-54=jonhartl user-55=highlegh user-56=southlon user-57=firstred user-58=costestimatorco user-59=firstrel user-60=clarkass user-61=fetch user-62=carsinyo user-63=hubmaster user-64=elecleis user-65=gilpin user-66=milloyco user-67=thqkgnbz user-68=connectedshoppin user-69=ianrayne user-70=accooper user-71=steakbridieme user-72=donnychicago user-73=firstre5 user-74=ctedorgu user-75=philmcph user-76=lkpier user-77=foods user-78=leftie user-79=health2045 user-80=fortunaz user-81=nscdp user-82=barbersh user-83=tigerlet user-84=nomistakes user-85=hidden user-86=smrszyqg user-87=isleofwi user-88=cwsocial user-89=howardon user-90=pugwash user-91=paulmca1 user-92=ninejimm user-93=reliable user-94=cathski user-95=cambria1 user-96=courseme user-97=eugincou user-98=hirefootballgame user-99=asandcoc user-100=sibtoncc user-101=steve
Sep 23 06:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=bwppodcast user-104=nsceres user-105=fawcettd user-106=burydropin user-107=dhyana user-108=darkstar user-109=eatspam user-110=beauty user-111=boldover user-112=nove user-113=crrtipdl user-114=sosevalu user-115=bakery user-116=nvihkvu user-117=havantho user-118=sketchy user-119=cath user-120=what user-121=oubpgvbx user-122=tstardom user-123=design user-124=kategilpin user-125=stagingerris user-126=dancinggardener user-127=ladburyp user-128=jennimil user-129=tomandle user-130=david user-131=careers user-132=nbhavers user-133=mcdermos user-134=chrisdal user-135=onlycont user-136=lucy user-137=attlebor user-138=romaldki user-139=branko user-140=hodgsonmail user-141=ranxterc user-142=outdoorc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 06:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 06:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:54 nativespace-cdp sudo[1202483]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 06:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:55 nativespace-cdp sudo[1202495]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0kIeUEbiaUm5j3RR.~
Sep 23 06:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:55 nativespace-cdp sudo[1202498]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0kIeUEbiaUm5j3RR.~'
Sep 23 06:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:55 nativespace-cdp sudo[1202501]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0kIeUEbiaUm5j3RR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 06:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:55 nativespace-cdp sudo[1202505]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 06:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:55 nativespace-cdp sudo[1202508]: pam_unix(sudo:session): session closed for user root
Sep 23 06:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 06:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:09:57 nativespace-cdp sudo[1202527]: pam_unix(sudo:session): session closed for user root
Sep 23 06:11:33 nativespace-cdp sshd[1203051]: Connection closed by 159.100.136.21 port 50312 [preauth]
Sep 23 06:15:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 06:15:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 06:15:02 nativespace-cdp sudo[1203841]: pam_unix(sudo:session): session closed for user root
Sep 23 06:16:33 nativespace-cdp sshd[1204536]: Connection closed by 159.100.136.21 port 59090 [preauth]
Sep 23 06:21:34 nativespace-cdp sshd[1205678]: Connection closed by 159.100.136.21 port 39864 [preauth]
Sep 23 06:26:33 nativespace-cdp sshd[1206651]: Connection closed by 159.100.136.21 port 49544 [preauth]
Sep 23 06:31:33 nativespace-cdp sshd[1208029]: Connection closed by 159.100.136.21 port 59028 [preauth]
Sep 23 06:36:36 nativespace-cdp sshd[1209106]: Connection closed by 159.100.136.21 port 40454 [preauth]
Sep 23 06:41:36 nativespace-cdp sshd[1210188]: Connection closed by 159.100.136.21 port 49588 [preauth]
Sep 23 06:46:33 nativespace-cdp sshd[1211449]: Connection closed by 159.100.136.21 port 58282 [preauth]
Sep 23 06:51:33 nativespace-cdp sshd[1212516]: Connection closed by 159.100.136.21 port 39416 [preauth]
Sep 23 06:56:33 nativespace-cdp sshd[1213545]: Connection closed by 159.100.136.21 port 49182 [preauth]
Sep 23 07:01:33 nativespace-cdp sshd[1214907]: Connection closed by 159.100.136.21 port 58446 [preauth]
Sep 23 07:06:33 nativespace-cdp sshd[1216132]: Connection closed by 159.100.136.21 port 40074 [preauth]
Sep 23 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:44 nativespace-cdp sudo[1216766]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:44 nativespace-cdp sudo[1216770]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:46 nativespace-cdp sudo[1216775]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 07:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:46 nativespace-cdp sudo[1216782]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 07:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:49 nativespace-cdp sudo[1216789]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:49 nativespace-cdp sudo[1216804]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:49 nativespace-cdp sudo[1216809]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:49 nativespace-cdp sudo[1216813]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:49 nativespace-cdp sudo[1216818]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:49 nativespace-cdp sudo[1216824]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:49 nativespace-cdp sudo[1216829]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 07:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:55 nativespace-cdp sudo[1216847]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 07:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:56 nativespace-cdp sudo[1216853]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=eugincou user-2=courseme user-3=hirefootballgame user-4=cwsocial user-5=howardon user-6=pugwash user-7=paulmca1 user-8=cathski user-9=cambria1 user-10=ninejimm user-11=reliable user-12=nomistakes user-13=hidden user-14=barbersh user-15=tigerlet user-16=smrszyqg user-17=isleofwi user-18=lkpier user-19=donnychicago user-20=steakbridieme user-21=firstre5 user-22=philmcph user-23=ctedorgu user-24=nscdp user-25=foods user-26=leftie user-27=health2045 user-28=fortunaz user-29=dhyana user-30=beauty user-31=darkstar user-32=eatspam user-33=nsceres user-34=fawcettd user-35=burydropin user-36=steve user-37=bwppodcast user-38=zebrapho user-39=asandcoc user-40=sibtoncc user-41=design user-42=stagingerris user-43=dancinggardener user-44=ladburyp user-45=kategilpin user-46=havantho user-47=cath
Sep 23 07:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=sketchy user-49=nvihkvu user-50=tstardom user-51=oubpgvbx user-52=what user-53=bakery user-54=crrtipdl user-55=sosevalu user-56=boldover user-57=nove user-58=romaldki user-59=hodgsonmail user-60=ranxterc user-61=outdoorc user-62=branko user-63=onlycont user-64=lucy user-65=attlebor user-66=david user-67=careers user-68=nbhavers user-69=chrisdal user-70=mcdermos user-71=jennimil user-72=tomandle user-73=magichat user-74=hhdugcor user-75=lbhyisi user-76=dickemery123 user-77=ptkxhsbt user-78=martsblo user-79=megacards user-80=musorguk user-81=wilsonsw user-82=strathar user-83=atestord user-84=sarafoundation user-85=lakesan1 user-86=brmrjxl user-87=stephani user-88=leereyn1 user-89=agproduc user-90=still user-91=spectrum user-92=theblack user-93=hodgesonweb user-94=jarvisin user-95=ulsukarm user-96=vantagep user-97=athenare user-98=connect9 user-99=lbscrmod user-100=maflemin user-101=booff user-102=markward
Sep 23 07:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=foundation user-104=nativene user-105=innovat1 user-106=stuartge user-107=askhform user-108=alexadmin user-109=skyfirec user-110=newstoda user-111=ggaaorgu user-112=belle user-113=bemadonn user-114=bedfords user-115=vivienn1 user-116=firstre2 user-117=oneoarco user-118=battlere user-119=nstriton user-120=brighto1 user-121=connectedshoppin user-122=thqkgnbz user-123=accooper user-124=ianrayne user-125=hubmaster user-126=fetch user-127=carsinyo user-128=milloyco user-129=gilpin user-130=elecleis user-131=firstred user-132=highlegh user-133=southlon user-134=clarkass user-135=firstrel user-136=costestimatorco user-137=coursemc user-138=opaiscyx user-139=ultbcrra user-140=jonhartl user-141=seftvta user-142=firstres feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 07:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 07:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:57 nativespace-cdp sudo[1216868]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 07:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:58 nativespace-cdp sudo[1216877]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-L1kK14uV76aw2C58.~
Sep 23 07:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:58 nativespace-cdp sudo[1216882]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-L1kK14uV76aw2C58.~'
Sep 23 07:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:58 nativespace-cdp sudo[1216886]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-L1kK14uV76aw2C58.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 07:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:58 nativespace-cdp sudo[1216893]: pam_unix(sudo:session): session closed for user root
Sep 23 07:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 07:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:09:58 nativespace-cdp sudo[1216898]: pam_unix(sudo:session): session closed for user root
Sep 23 07:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 07:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 07:10:06 nativespace-cdp sudo[1217056]: pam_unix(sudo:session): session closed for user root
Sep 23 07:11:33 nativespace-cdp sshd[1217383]: Connection closed by 159.100.136.21 port 49538 [preauth]
Sep 23 07:16:35 nativespace-cdp sshd[1218673]: Connection closed by 159.100.136.21 port 58896 [preauth]
Sep 23 07:21:34 nativespace-cdp sshd[1219795]: Connection closed by 159.100.136.21 port 39656 [preauth]
Sep 23 07:23:20 nativespace-cdp sshd[1220220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.193.190.42  user=root
Sep 23 07:23:20 nativespace-cdp sshd[1220220]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 07:23:22 nativespace-cdp sshd[1220220]: Failed password for root from 116.193.190.42 port 47164 ssh2
Sep 23 07:23:28 nativespace-cdp sshd[1220220]: Received disconnect from 116.193.190.42 port 47164:11: Bye Bye [preauth]
Sep 23 07:23:28 nativespace-cdp sshd[1220220]: Disconnected from 116.193.190.42 port 47164 [preauth]
Sep 23 07:26:33 nativespace-cdp sshd[1220880]: Connection closed by 159.100.136.21 port 49240 [preauth]
Sep 23 07:30:32 nativespace-cdp sshd[1221996]: Connection closed by 116.193.190.42 port 54956 [preauth]
Sep 23 07:31:33 nativespace-cdp sshd[1222243]: Connection closed by 159.100.136.21 port 58642 [preauth]
Sep 23 07:31:34 nativespace-cdp sshd[1222232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.193.190.42  user=root
Sep 23 07:31:34 nativespace-cdp sshd[1222232]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 07:31:35 nativespace-cdp sshd[1222232]: Failed password for root from 116.193.190.42 port 42522 ssh2
Sep 23 07:31:36 nativespace-cdp sshd[1222232]: Received disconnect from 116.193.190.42 port 42522:11: Bye Bye [preauth]
Sep 23 07:31:36 nativespace-cdp sshd[1222232]: Disconnected from 116.193.190.42 port 42522 [preauth]
Sep 23 07:32:38 nativespace-cdp sshd[1222531]: Invalid user sysadmin from 116.193.190.42 port 50290
Sep 23 07:32:38 nativespace-cdp sshd[1222531]: input_userauth_request: invalid user sysadmin [preauth]
Sep 23 07:32:38 nativespace-cdp sshd[1222531]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 07:32:38 nativespace-cdp sshd[1222531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.193.190.42
Sep 23 07:32:40 nativespace-cdp sshd[1222531]: Failed password for invalid user sysadmin from 116.193.190.42 port 50290 ssh2
Sep 23 07:32:40 nativespace-cdp sshd[1222531]: Received disconnect from 116.193.190.42 port 50290:11: Bye Bye [preauth]
Sep 23 07:32:40 nativespace-cdp sshd[1222531]: Disconnected from 116.193.190.42 port 50290 [preauth]
Sep 23 07:36:33 nativespace-cdp sshd[1223465]: Connection closed by 159.100.136.21 port 39756 [preauth]
Sep 23 07:36:46 nativespace-cdp sshd[1223491]: Did not receive identification string from 87.236.176.151 port 38429
Sep 23 07:36:46 nativespace-cdp sshd[1223496]: Connection closed by 87.236.176.151 port 49589 [preauth]
Sep 23 07:41:33 nativespace-cdp sshd[1224632]: Connection closed by 159.100.136.21 port 48946 [preauth]
Sep 23 07:46:33 nativespace-cdp sshd[1226047]: Connection closed by 159.100.136.21 port 57996 [preauth]
Sep 23 07:51:33 nativespace-cdp sshd[1227365]: Connection closed by 159.100.136.21 port 39218 [preauth]
Sep 23 07:56:33 nativespace-cdp sshd[1228540]: Connection closed by 159.100.136.21 port 48822 [preauth]
Sep 23 08:01:33 nativespace-cdp sshd[1230257]: Connection closed by 159.100.136.21 port 57804 [preauth]
Sep 23 08:06:34 nativespace-cdp sshd[1231788]: Connection closed by 159.100.136.21 port 38796 [preauth]
Sep 23 08:09:25 nativespace-cdp sshd[1232501]: Invalid user jenkins from 189.222.226.178 port 56086
Sep 23 08:09:25 nativespace-cdp sshd[1232501]: input_userauth_request: invalid user jenkins [preauth]
Sep 23 08:09:25 nativespace-cdp sshd[1232501]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 08:09:25 nativespace-cdp sshd[1232501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.226.178
Sep 23 08:09:27 nativespace-cdp sshd[1232501]: Failed password for invalid user jenkins from 189.222.226.178 port 56086 ssh2
Sep 23 08:09:27 nativespace-cdp sshd[1232501]: Received disconnect from 189.222.226.178 port 56086:11: Bye Bye [preauth]
Sep 23 08:09:27 nativespace-cdp sshd[1232501]: Disconnected from 189.222.226.178 port 56086 [preauth]
Sep 23 08:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 08:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:38 nativespace-cdp sudo[1232560]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 08:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:38 nativespace-cdp sudo[1232565]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 08:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:39 nativespace-cdp sudo[1232570]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:39 nativespace-cdp sudo[1232579]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:43 nativespace-cdp sudo[1232585]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:43 nativespace-cdp sudo[1232606]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:43 nativespace-cdp sudo[1232611]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:43 nativespace-cdp sudo[1232616]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:43 nativespace-cdp sudo[1232621]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:43 nativespace-cdp sudo[1232627]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 08:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:44 nativespace-cdp sudo[1232632]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 08:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:51 nativespace-cdp sudo[1232663]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 08:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:52 nativespace-cdp sudo[1232670]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=tomandle user-2=jennimil user-3=chrisdal user-4=mcdermos user-5=david user-6=nbhavers user-7=careers user-8=lucy user-9=attlebor user-10=onlycont user-11=hodgsonmail user-12=ranxterc user-13=outdoorc user-14=branko user-15=romaldki user-16=nove user-17=boldover user-18=bakery user-19=crrtipdl user-20=sosevalu user-21=oubpgvbx user-22=tstardom user-23=what user-24=havantho user-25=cath user-26=sketchy user-27=nvihkvu user-28=stagingerris user-29=dancinggardener user-30=ladburyp user-31=kategilpin user-32=design user-33=asandcoc user-34=sibtoncc user-35=bwppodcast user-36=zebrapho user-37=steve user-38=fawcettd user-39=burydropin user-40=nsceres user-41=beauty user-42=darkstar user-43=eatspam user-44=dhyana user-45=nscdp user-46=leftie user-47=foods user-48=health2045 user-49=fortunaz
Sep 23 08:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=lkpier user-51=donnychicago user-52=firstre5 user-53=steakbridieme user-54=philmcph user-55=ctedorgu user-56=smrszyqg user-57=isleofwi user-58=nomistakes user-59=hidden user-60=barbersh user-61=tigerlet user-62=cathski user-63=cambria1 user-64=ninejimm user-65=reliable user-66=cwsocial user-67=howardon user-68=pugwash user-69=paulmca1 user-70=hirefootballgame user-71=eugincou user-72=courseme user-73=ultbcrra user-74=jonhartl user-75=seftvta user-76=firstres user-77=coursemc user-78=opaiscyx user-79=clarkass user-80=firstrel user-81=costestimatorco user-82=firstred user-83=highlegh user-84=southlon user-85=gilpin user-86=milloyco user-87=elecleis user-88=hubmaster user-89=fetch user-90=carsinyo user-91=accooper user-92=ianrayne user-93=connectedshoppin user-94=thqkgnbz user-95=nstriton user-96=brighto1 user-97=vivienn1 user-98=firstre2 user-99=oneoarco user-100=battlere user-101=bedfords user-102=newstoda
Sep 23 08:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=belle user-104=ggaaorgu user-105=bemadonn user-106=alexadmin user-107=skyfirec user-108=innovat1 user-109=askhform user-110=stuartge user-111=nativene user-112=markward user-113=booff user-114=foundation user-115=vantagep user-116=connect9 user-117=athenare user-118=lbscrmod user-119=maflemin user-120=ulsukarm user-121=jarvisin user-122=spectrum user-123=hodgesonweb user-124=theblack user-125=agproduc user-126=still user-127=stephani user-128=leereyn1 user-129=brmrjxl user-130=lakesan1 user-131=strathar user-132=atestord user-133=sarafoundation user-134=wilsonsw user-135=megacards user-136=musorguk user-137=martsblo user-138=dickemery123 user-139=ptkxhsbt user-140=hhdugcor user-141=lbhyisi user-142=magichat feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 08:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 08:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:53 nativespace-cdp sudo[1232677]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:53 nativespace-cdp sudo[1232685]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6xWjZqVNESH7Q6aF.~
Sep 23 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:53 nativespace-cdp sudo[1232690]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6xWjZqVNESH7Q6aF.~'
Sep 23 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:53 nativespace-cdp sudo[1232695]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6xWjZqVNESH7Q6aF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:53 nativespace-cdp sudo[1232701]: pam_unix(sudo:session): session closed for user root
Sep 23 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:09:53 nativespace-cdp sudo[1232706]: pam_unix(sudo:session): session closed for user root
Sep 23 08:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 08:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 08:10:16 nativespace-cdp sudo[1232968]: pam_unix(sudo:session): session closed for user root
Sep 23 08:11:35 nativespace-cdp sshd[1233192]: Connection closed by 159.100.136.21 port 47796 [preauth]
Sep 23 08:16:15 nativespace-cdp sshd[1234598]: Invalid user ubuntu from 189.222.226.178 port 12027
Sep 23 08:16:15 nativespace-cdp sshd[1234598]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 08:16:15 nativespace-cdp sshd[1234598]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 08:16:15 nativespace-cdp sshd[1234598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.226.178
Sep 23 08:16:18 nativespace-cdp sshd[1234598]: Failed password for invalid user ubuntu from 189.222.226.178 port 12027 ssh2
Sep 23 08:16:18 nativespace-cdp sshd[1234598]: Received disconnect from 189.222.226.178 port 12027:11: Bye Bye [preauth]
Sep 23 08:16:18 nativespace-cdp sshd[1234598]: Disconnected from 189.222.226.178 port 12027 [preauth]
Sep 23 08:16:35 nativespace-cdp sshd[1234653]: Connection closed by 159.100.136.21 port 57434 [preauth]
Sep 23 08:17:34 nativespace-cdp sshd[1234979]: Invalid user postgres from 189.222.226.178 port 45140
Sep 23 08:17:34 nativespace-cdp sshd[1234979]: input_userauth_request: invalid user postgres [preauth]
Sep 23 08:17:34 nativespace-cdp sshd[1234979]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 08:17:34 nativespace-cdp sshd[1234979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.226.178
Sep 23 08:17:37 nativespace-cdp sshd[1234979]: Failed password for invalid user postgres from 189.222.226.178 port 45140 ssh2
Sep 23 08:21:33 nativespace-cdp sshd[1235974]: Connection closed by 159.100.136.21 port 38542 [preauth]
Sep 23 08:26:33 nativespace-cdp sshd[1237138]: Connection closed by 159.100.136.21 port 48426 [preauth]
Sep 23 08:31:33 nativespace-cdp sshd[1238508]: Connection closed by 159.100.136.21 port 57574 [preauth]
Sep 23 08:36:33 nativespace-cdp sshd[1239953]: Connection closed by 159.100.136.21 port 38720 [preauth]
Sep 23 08:41:33 nativespace-cdp sshd[1241215]: Connection closed by 159.100.136.21 port 48026 [preauth]
Sep 23 08:46:34 nativespace-cdp sshd[1242760]: Connection closed by 159.100.136.21 port 57784 [preauth]
Sep 23 08:51:33 nativespace-cdp sshd[1244264]: Connection closed by 159.100.136.21 port 37984 [preauth]
Sep 23 08:56:38 nativespace-cdp sshd[1245517]: Connection closed by 159.100.136.21 port 47974 [preauth]
Sep 23 09:01:35 nativespace-cdp sshd[1247220]: Connection closed by 159.100.136.21 port 57330 [preauth]
Sep 23 09:06:34 nativespace-cdp sshd[1248558]: Connection closed by 159.100.136.21 port 39014 [preauth]
Sep 23 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:44 nativespace-cdp sudo[1249319]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:44 nativespace-cdp sudo[1249325]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:45 nativespace-cdp sudo[1249330]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 09:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:46 nativespace-cdp sudo[1249340]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 09:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:50 nativespace-cdp sudo[1249345]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:50 nativespace-cdp sudo[1249363]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:50 nativespace-cdp sudo[1249368]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:50 nativespace-cdp sudo[1249374]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:50 nativespace-cdp sudo[1249379]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:50 nativespace-cdp sudo[1249385]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:50 nativespace-cdp sudo[1249390]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 09:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:55 nativespace-cdp sudo[1249423]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 09:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:56 nativespace-cdp sudo[1249431]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=asandcoc user-2=sibtoncc user-3=zebrapho user-4=bwppodcast user-5=steve user-6=burydropin user-7=fawcettd user-8=nsceres user-9=eatspam user-10=darkstar user-11=beauty user-12=dhyana user-13=health2045 user-14=fortunaz user-15=leftie user-16=foods user-17=nscdp user-18=ctedorgu user-19=philmcph user-20=firstre5 user-21=donnychicago user-22=steakbridieme user-23=lkpier user-24=smrszyqg user-25=isleofwi user-26=tigerlet user-27=barbersh user-28=hidden user-29=nomistakes user-30=reliable user-31=ninejimm user-32=cambria1 user-33=cathski user-34=paulmca1 user-35=pugwash user-36=howardon user-37=cwsocial user-38=hirefootballgame user-39=courseme user-40=eugincou user-41=tomandle user-42=jennimil user-43=mcdermos user-44=chrisdal user-45=nbhavers user-46=careers user-47=david user-48=attlebor
Sep 23 09:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=lucy user-50=onlycont user-51=branko user-52=outdoorc user-53=hodgsonmail user-54=ranxterc user-55=romaldki user-56=nove user-57=boldover user-58=sosevalu user-59=crrtipdl user-60=bakery user-61=what user-62=oubpgvbx user-63=tstardom user-64=nvihkvu user-65=cath user-66=sketchy user-67=havantho user-68=kategilpin user-69=ladburyp user-70=dancinggardener user-71=stagingerris user-72=design user-73=markward user-74=booff user-75=foundation user-76=maflemin user-77=lbscrmod user-78=connect9 user-79=athenare user-80=vantagep user-81=ulsukarm user-82=jarvisin user-83=hodgesonweb user-84=theblack user-85=spectrum user-86=still user-87=agproduc user-88=leereyn1 user-89=stephani user-90=lakesan1 user-91=brmrjxl user-92=sarafoundation user-93=atestord user-94=strathar user-95=wilsonsw user-96=musorguk user-97=megacards user-98=martsblo user-99=ptkxhsbt user-100=dickemery123 user-101=lbhyisi user-102=hhdugcor
Sep 23 09:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=magichat user-104=firstres user-105=seftvta user-106=jonhartl user-107=ultbcrra user-108=opaiscyx user-109=coursemc user-110=costestimatorco user-111=clarkass user-112=firstrel user-113=southlon user-114=highlegh user-115=firstred user-116=elecleis user-117=gilpin user-118=milloyco user-119=carsinyo user-120=fetch user-121=hubmaster user-122=ianrayne user-123=accooper user-124=thqkgnbz user-125=connectedshoppin user-126=brighto1 user-127=nstriton user-128=battlere user-129=oneoarco user-130=firstre2 user-131=vivienn1 user-132=bedfords user-133=bemadonn user-134=belle user-135=ggaaorgu user-136=newstoda user-137=alexadmin user-138=skyfirec user-139=askhform user-140=stuartge user-141=innovat1 user-142=nativene feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 09:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 09:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:57 nativespace-cdp sudo[1249440]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 09:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:57 nativespace-cdp sudo[1249453]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rEKenqLOQ8c6QznW.~
Sep 23 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:58 nativespace-cdp sudo[1249458]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rEKenqLOQ8c6QznW.~'
Sep 23 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:58 nativespace-cdp sudo[1249462]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rEKenqLOQ8c6QznW.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:58 nativespace-cdp sudo[1249468]: pam_unix(sudo:session): session closed for user root
Sep 23 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:09:58 nativespace-cdp sudo[1249473]: pam_unix(sudo:session): session closed for user root
Sep 23 09:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 09:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 09:10:18 nativespace-cdp sudo[1249667]: pam_unix(sudo:session): session closed for user root
Sep 23 09:11:34 nativespace-cdp sshd[1249946]: Connection closed by 159.100.136.21 port 48108 [preauth]
Sep 23 09:16:33 nativespace-cdp sshd[1252102]: Connection closed by 159.100.136.21 port 58174 [preauth]
Sep 23 09:21:33 nativespace-cdp sshd[1253234]: Connection closed by 159.100.136.21 port 39536 [preauth]
Sep 23 09:26:33 nativespace-cdp sshd[1254495]: Connection closed by 159.100.136.21 port 48758 [preauth]
Sep 23 09:31:33 nativespace-cdp sshd[1256213]: Connection closed by 159.100.136.21 port 58174 [preauth]
Sep 23 09:36:33 nativespace-cdp sshd[1257638]: Connection closed by 159.100.136.21 port 39688 [preauth]
Sep 23 09:41:33 nativespace-cdp sshd[1258905]: Connection closed by 159.100.136.21 port 49132 [preauth]
Sep 23 09:46:33 nativespace-cdp sshd[1260504]: Connection closed by 159.100.136.21 port 58608 [preauth]
Sep 23 09:51:34 nativespace-cdp sshd[1261948]: Connection closed by 159.100.136.21 port 39034 [preauth]
Sep 23 09:56:33 nativespace-cdp sshd[1263135]: Connection closed by 159.100.136.21 port 48626 [preauth]
Sep 23 10:01:35 nativespace-cdp sshd[1264802]: Connection closed by 159.100.136.21 port 58054 [preauth]
Sep 23 10:06:34 nativespace-cdp sshd[1266450]: Connection closed by 159.100.136.21 port 39416 [preauth]
Sep 23 10:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 10:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:48 nativespace-cdp sudo[1267394]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 10:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:48 nativespace-cdp sudo[1267399]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 10:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:50 nativespace-cdp sudo[1267404]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 10:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:50 nativespace-cdp sudo[1267418]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 10:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:54 nativespace-cdp sudo[1267424]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 10:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:54 nativespace-cdp sudo[1267440]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 10:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:54 nativespace-cdp sudo[1267445]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 10:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:54 nativespace-cdp sudo[1267449]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 10:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:54 nativespace-cdp sudo[1267454]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 10:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:54 nativespace-cdp sudo[1267460]: pam_unix(sudo:session): session closed for user root
Sep 23 10:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 10:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:09:54 nativespace-cdp sudo[1267465]: pam_unix(sudo:session): session closed for user root
Sep 23 10:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 10:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:10:02 nativespace-cdp sudo[1267634]: pam_unix(sudo:session): session closed for user root
Sep 23 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:10:06 nativespace-cdp sudo[1267675]: pam_unix(sudo:session): session closed for user root
Sep 23 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nsceres user-2=fawcettd user-3=burydropin user-4=dhyana user-5=beauty user-6=darkstar user-7=eatspam user-8=sibtoncc user-9=asandcoc user-10=steve user-11=bwppodcast user-12=zebrapho user-13=cwsocial user-14=howardon user-15=pugwash user-16=paulmca1 user-17=cathski user-18=cambria1 user-19=reliable user-20=ninejimm user-21=eugincou user-22=courseme user-23=hirefootballgame user-24=lkpier user-25=donnychicago user-26=steakbridieme user-27=firstre5 user-28=philmcph user-29=ctedorgu user-30=nscdp user-31=leftie user-32=foods user-33=health2045 user-34=fortunaz user-35=nomistakes user-36=hidden user-37=barbersh user-38=tigerlet user-39=isleofwi user-40=smrszyqg user-41=onlycont user-42=lucy user-43=attlebor user-44=romaldki user-45=outdoorc user-46=ranxterc user-47=hodgsonmail user-48=branko
Sep 23 10:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jennimil user-50=tomandle user-51=david user-52=nbhavers user-53=careers user-54=chrisdal user-55=mcdermos user-56=havantho user-57=cath user-58=sketchy user-59=nvihkvu user-60=tstardom user-61=oubpgvbx user-62=what user-63=design user-64=dancinggardener user-65=stagingerris user-66=ladburyp user-67=kategilpin user-68=boldover user-69=nove user-70=bakery user-71=crrtipdl user-72=sosevalu user-73=spectrum user-74=hodgesonweb user-75=theblack user-76=jarvisin user-77=stephani user-78=leereyn1 user-79=agproduc user-80=still user-81=vantagep user-82=connect9 user-83=athenare user-84=lbscrmod user-85=maflemin user-86=booff user-87=foundation user-88=markward user-89=ulsukarm user-90=dickemery123 user-91=ptkxhsbt user-92=martsblo user-93=magichat user-94=hhdugcor user-95=lbhyisi user-96=strathar user-97=atestord user-98=sarafoundation user-99=brmrjxl user-100=lakesan1 user-101=megacards user-102=musorguk
Sep 23 10:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=wilsonsw user-104=hubmaster user-105=fetch user-106=carsinyo user-107=milloyco user-108=gilpin user-109=elecleis user-110=connectedshoppin user-111=thqkgnbz user-112=accooper user-113=ianrayne user-114=coursemc user-115=opaiscyx user-116=ultbcrra user-117=jonhartl user-118=seftvta user-119=firstres user-120=firstred user-121=highlegh user-122=southlon user-123=firstrel user-124=clarkass user-125=costestimatorco user-126=skyfirec user-127=alexadmin user-128=nativene user-129=innovat1 user-130=stuartge user-131=askhform user-132=vivienn1 user-133=firstre2 user-134=oneoarco user-135=battlere user-136=nstriton user-137=brighto1 user-138=newstoda user-139=ggaaorgu user-140=belle user-141=bemadonn user-142=bedfords feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 10:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:10:08 nativespace-cdp sudo[1267696]: pam_unix(sudo:session): session closed for user root
Sep 23 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:10:09 nativespace-cdp sudo[1267717]: pam_unix(sudo:session): session closed for user root
Sep 23 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4WEVhfsovWxfNFc4.~
Sep 23 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:10:09 nativespace-cdp sudo[1267720]: pam_unix(sudo:session): session closed for user root
Sep 23 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4WEVhfsovWxfNFc4.~'
Sep 23 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:10:09 nativespace-cdp sudo[1267723]: pam_unix(sudo:session): session closed for user root
Sep 23 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4WEVhfsovWxfNFc4.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:10:09 nativespace-cdp sudo[1267728]: pam_unix(sudo:session): session closed for user root
Sep 23 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:10:09 nativespace-cdp sudo[1267732]: pam_unix(sudo:session): session closed for user root
Sep 23 10:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 10:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 10:10:11 nativespace-cdp sudo[1267751]: pam_unix(sudo:session): session closed for user root
Sep 23 10:11:33 nativespace-cdp sshd[1268109]: Connection closed by 159.100.136.21 port 48976 [preauth]
Sep 23 10:16:34 nativespace-cdp sshd[1269684]: Connection closed by 159.100.136.21 port 58690 [preauth]
Sep 23 10:21:33 nativespace-cdp sshd[1271062]: Connection closed by 159.100.136.21 port 39608 [preauth]
Sep 23 10:26:33 nativespace-cdp sshd[1272443]: Connection closed by 159.100.136.21 port 49166 [preauth]
Sep 23 10:31:33 nativespace-cdp sshd[1274142]: Connection closed by 159.100.136.21 port 58184 [preauth]
Sep 23 10:36:33 nativespace-cdp sshd[1275384]: Connection closed by 159.100.136.21 port 39848 [preauth]
Sep 23 10:41:33 nativespace-cdp sshd[1276726]: Connection closed by 159.100.136.21 port 49012 [preauth]
Sep 23 10:46:33 nativespace-cdp sshd[1278163]: Connection closed by 159.100.136.21 port 58668 [preauth]
Sep 23 10:49:55 nativespace-cdp sshd[1279189]: Invalid user test from 103.153.255.15 port 48670
Sep 23 10:49:55 nativespace-cdp sshd[1279189]: input_userauth_request: invalid user test [preauth]
Sep 23 10:49:55 nativespace-cdp sshd[1279189]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:49:55 nativespace-cdp sshd[1279189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.153.255.15
Sep 23 10:49:57 nativespace-cdp sshd[1279189]: Failed password for invalid user test from 103.153.255.15 port 48670 ssh2
Sep 23 10:49:57 nativespace-cdp sshd[1279189]: Received disconnect from 103.153.255.15 port 48670:11: Bye Bye [preauth]
Sep 23 10:49:57 nativespace-cdp sshd[1279189]: Disconnected from 103.153.255.15 port 48670 [preauth]
Sep 23 10:50:56 nativespace-cdp sshd[1279615]: Invalid user user from 103.234.151.55 port 40452
Sep 23 10:50:56 nativespace-cdp sshd[1279615]: input_userauth_request: invalid user user [preauth]
Sep 23 10:50:56 nativespace-cdp sshd[1279615]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:50:56 nativespace-cdp sshd[1279615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.234.151.55
Sep 23 10:50:58 nativespace-cdp sshd[1279615]: Failed password for invalid user user from 103.234.151.55 port 40452 ssh2
Sep 23 10:51:00 nativespace-cdp sshd[1279615]: Received disconnect from 103.234.151.55 port 40452:11: Bye Bye [preauth]
Sep 23 10:51:00 nativespace-cdp sshd[1279615]: Disconnected from 103.234.151.55 port 40452 [preauth]
Sep 23 10:51:33 nativespace-cdp sshd[1279816]: Connection closed by 159.100.136.21 port 40152 [preauth]
Sep 23 10:52:09 nativespace-cdp sshd[1279968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.235.34.82  user=root
Sep 23 10:52:09 nativespace-cdp sshd[1279968]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 10:52:11 nativespace-cdp sshd[1279968]: Failed password for root from 103.235.34.82 port 33482 ssh2
Sep 23 10:52:16 nativespace-cdp sshd[1279968]: Received disconnect from 103.235.34.82 port 33482:11: Bye Bye [preauth]
Sep 23 10:52:16 nativespace-cdp sshd[1279968]: Disconnected from 103.235.34.82 port 33482 [preauth]
Sep 23 10:52:53 nativespace-cdp sshd[1280113]: Invalid user ubuntu from 73.87.88.208 port 50693
Sep 23 10:52:53 nativespace-cdp sshd[1280113]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 10:52:53 nativespace-cdp sshd[1280113]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:52:53 nativespace-cdp sshd[1280113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.87.88.208
Sep 23 10:52:55 nativespace-cdp sshd[1280113]: Failed password for invalid user ubuntu from 73.87.88.208 port 50693 ssh2
Sep 23 10:52:55 nativespace-cdp sshd[1280113]: Received disconnect from 73.87.88.208 port 50693:11: Bye Bye [preauth]
Sep 23 10:52:55 nativespace-cdp sshd[1280113]: Disconnected from 73.87.88.208 port 50693 [preauth]
Sep 23 10:53:01 nativespace-cdp sshd[1280150]: Invalid user ubuntu from 103.235.34.82 port 47950
Sep 23 10:53:01 nativespace-cdp sshd[1280150]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 10:53:01 nativespace-cdp sshd[1280150]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:53:01 nativespace-cdp sshd[1280150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.235.34.82
Sep 23 10:53:03 nativespace-cdp sshd[1280150]: Failed password for invalid user ubuntu from 103.235.34.82 port 47950 ssh2
Sep 23 10:53:04 nativespace-cdp sshd[1280150]: Received disconnect from 103.235.34.82 port 47950:11: Bye Bye [preauth]
Sep 23 10:53:04 nativespace-cdp sshd[1280150]: Disconnected from 103.235.34.82 port 47950 [preauth]
Sep 23 10:53:11 nativespace-cdp sshd[1280272]: Invalid user deploy from 103.235.34.82 port 49356
Sep 23 10:53:11 nativespace-cdp sshd[1280272]: input_userauth_request: invalid user deploy [preauth]
Sep 23 10:53:11 nativespace-cdp sshd[1280272]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:53:11 nativespace-cdp sshd[1280272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.235.34.82
Sep 23 10:53:13 nativespace-cdp sshd[1280272]: Failed password for invalid user deploy from 103.235.34.82 port 49356 ssh2
Sep 23 10:53:13 nativespace-cdp sshd[1280272]: Received disconnect from 103.235.34.82 port 49356:11: Bye Bye [preauth]
Sep 23 10:53:13 nativespace-cdp sshd[1280272]: Disconnected from 103.235.34.82 port 49356 [preauth]
Sep 23 10:54:55 nativespace-cdp sshd[1280775]: Invalid user ubuntu from 45.8.229.55 port 43144
Sep 23 10:54:55 nativespace-cdp sshd[1280775]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 10:54:55 nativespace-cdp sshd[1280775]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:54:55 nativespace-cdp sshd[1280775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.8.229.55
Sep 23 10:54:57 nativespace-cdp sshd[1280775]: Failed password for invalid user ubuntu from 45.8.229.55 port 43144 ssh2
Sep 23 10:54:57 nativespace-cdp sshd[1280775]: Received disconnect from 45.8.229.55 port 43144:11: Bye Bye [preauth]
Sep 23 10:54:57 nativespace-cdp sshd[1280775]: Disconnected from 45.8.229.55 port 43144 [preauth]
Sep 23 10:55:48 nativespace-cdp sshd[1281108]: Invalid user test from 73.87.88.208 port 37675
Sep 23 10:55:48 nativespace-cdp sshd[1281108]: input_userauth_request: invalid user test [preauth]
Sep 23 10:55:48 nativespace-cdp sshd[1281108]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:55:48 nativespace-cdp sshd[1281108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.87.88.208
Sep 23 10:55:50 nativespace-cdp sshd[1281108]: Failed password for invalid user test from 73.87.88.208 port 37675 ssh2
Sep 23 10:55:50 nativespace-cdp sshd[1281108]: Received disconnect from 73.87.88.208 port 37675:11: Bye Bye [preauth]
Sep 23 10:55:50 nativespace-cdp sshd[1281108]: Disconnected from 73.87.88.208 port 37675 [preauth]
Sep 23 10:55:51 nativespace-cdp sshd[1281115]: Invalid user ubuntu from 103.153.255.15 port 47942
Sep 23 10:55:51 nativespace-cdp sshd[1281115]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 10:55:51 nativespace-cdp sshd[1281115]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:55:51 nativespace-cdp sshd[1281115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.153.255.15
Sep 23 10:55:54 nativespace-cdp sshd[1281115]: Failed password for invalid user ubuntu from 103.153.255.15 port 47942 ssh2
Sep 23 10:55:55 nativespace-cdp sshd[1281115]: Received disconnect from 103.153.255.15 port 47942:11: Bye Bye [preauth]
Sep 23 10:55:55 nativespace-cdp sshd[1281115]: Disconnected from 103.153.255.15 port 47942 [preauth]
Sep 23 10:55:59 nativespace-cdp sshd[1281132]: Invalid user ubuntu from 103.234.151.55 port 60256
Sep 23 10:55:59 nativespace-cdp sshd[1281132]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 10:55:59 nativespace-cdp sshd[1281132]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:55:59 nativespace-cdp sshd[1281132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.234.151.55
Sep 23 10:55:59 nativespace-cdp sshd[1281139]: Invalid user tuan from 45.8.229.55 port 59012
Sep 23 10:55:59 nativespace-cdp sshd[1281139]: input_userauth_request: invalid user tuan [preauth]
Sep 23 10:56:00 nativespace-cdp sshd[1281139]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:56:00 nativespace-cdp sshd[1281139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.8.229.55
Sep 23 10:56:00 nativespace-cdp sshd[1281132]: Failed password for invalid user ubuntu from 103.234.151.55 port 60256 ssh2
Sep 23 10:56:00 nativespace-cdp sshd[1281132]: Received disconnect from 103.234.151.55 port 60256:11: Bye Bye [preauth]
Sep 23 10:56:00 nativespace-cdp sshd[1281132]: Disconnected from 103.234.151.55 port 60256 [preauth]
Sep 23 10:56:01 nativespace-cdp sshd[1281139]: Failed password for invalid user tuan from 45.8.229.55 port 59012 ssh2
Sep 23 10:56:01 nativespace-cdp sshd[1281139]: Received disconnect from 45.8.229.55 port 59012:11: Bye Bye [preauth]
Sep 23 10:56:01 nativespace-cdp sshd[1281139]: Disconnected from 45.8.229.55 port 59012 [preauth]
Sep 23 10:56:33 nativespace-cdp sshd[1281258]: Connection closed by 159.100.136.21 port 49994 [preauth]
Sep 23 10:56:35 nativespace-cdp sshd[1281265]: Invalid user user from 73.87.88.208 port 43936
Sep 23 10:56:35 nativespace-cdp sshd[1281265]: input_userauth_request: invalid user user [preauth]
Sep 23 10:56:35 nativespace-cdp sshd[1281265]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:56:35 nativespace-cdp sshd[1281265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.87.88.208
Sep 23 10:56:36 nativespace-cdp sshd[1281265]: Failed password for invalid user user from 73.87.88.208 port 43936 ssh2
Sep 23 10:56:37 nativespace-cdp sshd[1281265]: Received disconnect from 73.87.88.208 port 43936:11: Bye Bye [preauth]
Sep 23 10:56:37 nativespace-cdp sshd[1281265]: Disconnected from 73.87.88.208 port 43936 [preauth]
Sep 23 10:56:38 nativespace-cdp sshd[1281303]: Invalid user sysadmin from 45.8.229.55 port 43488
Sep 23 10:56:38 nativespace-cdp sshd[1281303]: input_userauth_request: invalid user sysadmin [preauth]
Sep 23 10:56:38 nativespace-cdp sshd[1281303]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:56:38 nativespace-cdp sshd[1281303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.8.229.55
Sep 23 10:56:41 nativespace-cdp sshd[1281303]: Failed password for invalid user sysadmin from 45.8.229.55 port 43488 ssh2
Sep 23 10:56:41 nativespace-cdp sshd[1281303]: Received disconnect from 45.8.229.55 port 43488:11: Bye Bye [preauth]
Sep 23 10:56:41 nativespace-cdp sshd[1281303]: Disconnected from 45.8.229.55 port 43488 [preauth]
Sep 23 10:56:46 nativespace-cdp sshd[1281345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.153.255.15  user=root
Sep 23 10:56:46 nativespace-cdp sshd[1281345]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 10:56:48 nativespace-cdp sshd[1281345]: Failed password for root from 103.153.255.15 port 60410 ssh2
Sep 23 10:56:57 nativespace-cdp sshd[1281399]: Invalid user deploy from 103.234.151.55 port 44730
Sep 23 10:56:57 nativespace-cdp sshd[1281399]: input_userauth_request: invalid user deploy [preauth]
Sep 23 10:56:57 nativespace-cdp sshd[1281399]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:56:57 nativespace-cdp sshd[1281399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.234.151.55
Sep 23 10:56:59 nativespace-cdp sshd[1281399]: Failed password for invalid user deploy from 103.234.151.55 port 44730 ssh2
Sep 23 10:57:00 nativespace-cdp sshd[1281399]: Received disconnect from 103.234.151.55 port 44730:11: Bye Bye [preauth]
Sep 23 10:57:00 nativespace-cdp sshd[1281399]: Disconnected from 103.234.151.55 port 44730 [preauth]
Sep 23 10:57:05 nativespace-cdp sshd[1281472]: Invalid user deploy from 211.23.119.92 port 47560
Sep 23 10:57:05 nativespace-cdp sshd[1281472]: input_userauth_request: invalid user deploy [preauth]
Sep 23 10:57:05 nativespace-cdp sshd[1281472]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 10:57:05 nativespace-cdp sshd[1281472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.23.119.92
Sep 23 10:57:06 nativespace-cdp sshd[1281472]: Failed password for invalid user deploy from 211.23.119.92 port 47560 ssh2
Sep 23 10:57:06 nativespace-cdp sshd[1281472]: Received disconnect from 211.23.119.92 port 47560:11: Bye Bye [preauth]
Sep 23 10:57:06 nativespace-cdp sshd[1281472]: Disconnected from 211.23.119.92 port 47560 [preauth]
Sep 23 11:01:33 nativespace-cdp sshd[1283021]: Connection closed by 159.100.136.21 port 59512 [preauth]
Sep 23 11:02:29 nativespace-cdp sshd[1283415]: Invalid user gameserver from 211.23.119.92 port 49940
Sep 23 11:02:29 nativespace-cdp sshd[1283415]: input_userauth_request: invalid user gameserver [preauth]
Sep 23 11:02:29 nativespace-cdp sshd[1283415]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 11:02:29 nativespace-cdp sshd[1283415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.23.119.92
Sep 23 11:02:31 nativespace-cdp sshd[1283415]: Failed password for invalid user gameserver from 211.23.119.92 port 49940 ssh2
Sep 23 11:02:32 nativespace-cdp sshd[1283415]: Received disconnect from 211.23.119.92 port 49940:11: Bye Bye [preauth]
Sep 23 11:02:32 nativespace-cdp sshd[1283415]: Disconnected from 211.23.119.92 port 49940 [preauth]
Sep 23 11:04:20 nativespace-cdp sshd[1283882]: Invalid user user from 211.23.119.92 port 35174
Sep 23 11:04:20 nativespace-cdp sshd[1283882]: input_userauth_request: invalid user user [preauth]
Sep 23 11:04:20 nativespace-cdp sshd[1283882]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 11:04:20 nativespace-cdp sshd[1283882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.23.119.92
Sep 23 11:04:22 nativespace-cdp sshd[1283882]: Failed password for invalid user user from 211.23.119.92 port 35174 ssh2
Sep 23 11:06:33 nativespace-cdp sshd[1284519]: Connection closed by 159.100.136.21 port 41362 [preauth]
Sep 23 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:44 nativespace-cdp sudo[1285350]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:44 nativespace-cdp sudo[1285354]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:45 nativespace-cdp sudo[1285359]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 11:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:45 nativespace-cdp sudo[1285367]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 11:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:49 nativespace-cdp sudo[1285373]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 11:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:49 nativespace-cdp sudo[1285395]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 11:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:49 nativespace-cdp sudo[1285401]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 11:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:49 nativespace-cdp sudo[1285405]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 11:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:49 nativespace-cdp sudo[1285410]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 11:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:49 nativespace-cdp sudo[1285416]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 11:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:49 nativespace-cdp sudo[1285421]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:53 nativespace-cdp sudo[1285435]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:53 nativespace-cdp sudo[1285443]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=paulmca1 user-2=pugwash user-3=howardon user-4=cwsocial user-5=ninejimm user-6=reliable user-7=cathski user-8=cambria1 user-9=courseme user-10=eugincou user-11=hirefootballgame user-12=philmcph user-13=ctedorgu user-14=donnychicago user-15=steakbridieme user-16=firstre5 user-17=lkpier user-18=health2045 user-19=fortunaz user-20=foods user-21=leftie user-22=nscdp user-23=barbersh user-24=tigerlet user-25=hidden user-26=nomistakes user-27=isleofwi user-28=smrszyqg user-29=nsceres user-30=burydropin user-31=fawcettd user-32=dhyana user-33=eatspam user-34=darkstar user-35=beauty user-36=sibtoncc user-37=asandcoc user-38=steve user-39=zebrapho user-40=bwppodcast user-41=nvihkvu user-42=sketchy user-43=cath user-44=havantho user-45=what user-46=oubpgvbx user-47=tstardom user-48=design
Sep 23 11:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=kategilpin user-50=ladburyp user-51=stagingerris user-52=dancinggardener user-53=boldover user-54=nove user-55=sosevalu user-56=crrtipdl user-57=bakery user-58=onlycont user-59=attlebor user-60=lucy user-61=romaldki user-62=branko user-63=ranxterc user-64=hodgsonmail user-65=outdoorc user-66=jennimil user-67=tomandle user-68=careers user-69=nbhavers user-70=david user-71=mcdermos user-72=chrisdal user-73=ptkxhsbt user-74=dickemery123 user-75=martsblo user-76=magichat user-77=lbhyisi user-78=hhdugcor user-79=sarafoundation user-80=atestord user-81=strathar user-82=lakesan1 user-83=brmrjxl user-84=musorguk user-85=megacards user-86=wilsonsw user-87=theblack user-88=hodgesonweb user-89=spectrum user-90=jarvisin user-91=leereyn1 user-92=stephani user-93=still user-94=agproduc user-95=maflemin user-96=lbscrmod user-97=athenare user-98=connect9 user-99=vantagep user-100=markward user-101=booff
Sep 23 11:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=foundation user-103=ulsukarm user-104=alexadmin user-105=skyfirec user-106=nativene user-107=askhform user-108=stuartge user-109=innovat1 user-110=battlere user-111=oneoarco user-112=firstre2 user-113=vivienn1 user-114=brighto1 user-115=nstriton user-116=bemadonn user-117=ggaaorgu user-118=belle user-119=newstoda user-120=bedfords user-121=carsinyo user-122=fetch user-123=hubmaster user-124=elecleis user-125=gilpin user-126=milloyco user-127=thqkgnbz user-128=connectedshoppin user-129=ianrayne user-130=accooper user-131=coursemc user-132=opaiscyx user-133=firstres user-134=jonhartl user-135=seftvta user-136=ultbcrra user-137=southlon user-138=highlegh user-139=firstred user-140=costestimatorco user-141=firstrel user-142=clarkass feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 23 11:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:54 nativespace-cdp sudo[1285450]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 23 11:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:56 nativespace-cdp sudo[1285467]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 23 11:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 23 11:09:56 nativespace-cdp sudo[1285473]: pam_unix(sudo:session): session closed for user onlycont
Sep 23 11:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 23 11:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:57 nativespace-cdp sudo[1285486]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 23 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 11:09:57 nativespace-cdp sudo[1285494]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 23 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:09:59 nativespace-cdp sudo[1285523]: pam_unix(sudo:session): session closed for user root
Sep 23 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 23 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 23 11:09:59 nativespace-cdp sudo[1285531]: pam_unix(sudo:session): session closed for user lkpier
Sep 23 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 23 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:00 nativespace-cdp sudo[1285545]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 23 11:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 23 11:10:01 nativespace-cdp sudo[1285551]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 23 11:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 23 11:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 23 11:10:01 nativespace-cdp sudo[1285564]: pam_unix(sudo:session): session closed for user oneoarco
Sep 23 11:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 23 11:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:02 nativespace-cdp sudo[1285577]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 23 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 23 11:10:02 nativespace-cdp sudo[1285667]: pam_unix(sudo:session): session closed for user fortunaz
Sep 23 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 23 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:02 nativespace-cdp sudo[1285684]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:02 nativespace-cdp sudo[1285687]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 23 11:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:20 nativespace-cdp sudo[1286618]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 23 11:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:20 nativespace-cdp sudo[1286623]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 11:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:21 nativespace-cdp sudo[1286630]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BaOPYN9Ih0GSHtSV.~
Sep 23 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:22 nativespace-cdp sudo[1286634]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BaOPYN9Ih0GSHtSV.~'
Sep 23 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:22 nativespace-cdp sudo[1286637]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BaOPYN9Ih0GSHtSV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:22 nativespace-cdp sudo[1286641]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:22 nativespace-cdp sudo[1286644]: pam_unix(sudo:session): session closed for user root
Sep 23 11:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 11:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 11:10:23 nativespace-cdp sudo[1286660]: pam_unix(sudo:session): session closed for user root
Sep 23 11:11:33 nativespace-cdp sshd[1286949]: Connection closed by 159.100.136.21 port 50342 [preauth]
Sep 23 11:16:33 nativespace-cdp sshd[1288450]: Connection closed by 159.100.136.21 port 59872 [preauth]
Sep 23 11:21:33 nativespace-cdp sshd[1289993]: Connection closed by 159.100.136.21 port 41088 [preauth]
Sep 23 11:26:33 nativespace-cdp sshd[1291270]: Connection closed by 159.100.136.21 port 50856 [preauth]
Sep 23 11:31:33 nativespace-cdp sshd[1292837]: Connection closed by 159.100.136.21 port 60632 [preauth]
Sep 23 11:36:34 nativespace-cdp sshd[1294057]: Connection closed by 159.100.136.21 port 42550 [preauth]
Sep 23 11:41:33 nativespace-cdp sshd[1295339]: Connection closed by 159.100.136.21 port 51894 [preauth]
Sep 23 11:46:33 nativespace-cdp sshd[1296659]: Connection closed by 159.100.136.21 port 60768 [preauth]
Sep 23 11:56:35 nativespace-cdp sshd[1299506]: Connection closed by 159.100.136.21 port 51508 [preauth]
Sep 23 12:01:34 nativespace-cdp sshd[1301035]: Connection closed by 159.100.136.21 port 60662 [preauth]
Sep 23 12:06:35 nativespace-cdp sshd[1302449]: Connection closed by 159.100.136.21 port 42516 [preauth]
Sep 23 12:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 12:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:44 nativespace-cdp sudo[1303234]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 12:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:44 nativespace-cdp sudo[1303238]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 12:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:46 nativespace-cdp sudo[1303243]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 12:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:46 nativespace-cdp sudo[1303250]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 12:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:49 nativespace-cdp sudo[1303256]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 12:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:49 nativespace-cdp sudo[1303278]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 12:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:49 nativespace-cdp sudo[1303283]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 12:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:49 nativespace-cdp sudo[1303287]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 12:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:49 nativespace-cdp sudo[1303292]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 12:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:49 nativespace-cdp sudo[1303298]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:50 nativespace-cdp sudo[1303303]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 12:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:51 nativespace-cdp sudo[1303319]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 12:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:52 nativespace-cdp sudo[1303333]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=brighto1 user-2=nstriton user-3=firstre2 user-4=vivienn1 user-5=battlere user-6=oneoarco user-7=bedfords user-8=ggaaorgu user-9=belle user-10=newstoda user-11=bemadonn user-12=alexadmin user-13=skyfirec user-14=innovat1 user-15=askhform user-16=stuartge user-17=nativene user-18=seftvta user-19=jonhartl user-20=ultbcrra user-21=firstres user-22=coursemc user-23=opaiscyx user-24=firstrel user-25=clarkass user-26=costestimatorco user-27=firstred user-28=southlon user-29=highlegh user-30=gilpin user-31=milloyco user-32=elecleis user-33=hubmaster user-34=carsinyo user-35=fetch user-36=accooper user-37=ianrayne user-38=connectedshoppin user-39=thqkgnbz user-40=lakesan1 user-41=brmrjxl user-42=strathar user-43=sarafoundation user-44=atestord user-45=wilsonsw user-46=musorguk user-47=megacards
Sep 23 12:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=martsblo user-49=dickemery123 user-50=ptkxhsbt user-51=lbhyisi user-52=hhdugcor user-53=magichat user-54=booff user-55=markward user-56=foundation user-57=connect9 user-58=athenare user-59=vantagep user-60=maflemin user-61=lbscrmod user-62=ulsukarm user-63=jarvisin user-64=spectrum user-65=theblack user-66=hodgesonweb user-67=still user-68=agproduc user-69=stephani user-70=leereyn1 user-71=nove user-72=boldover user-73=bakery user-74=sosevalu user-75=crrtipdl user-76=tstardom user-77=oubpgvbx user-78=what user-79=cath user-80=sketchy user-81=havantho user-82=nvihkvu user-83=ladburyp user-84=stagingerris user-85=dancinggardener user-86=kategilpin user-87=design user-88=tomandle user-89=jennimil user-90=chrisdal user-91=mcdermos user-92=careers user-93=nbhavers user-94=david user-95=attlebor user-96=lucy user-97=onlycont user-98=ranxterc user-99=hodgsonmail user-100=outdoorc user-101=branko
Sep 23 12:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=romaldki user-103=nscdp user-104=fortunaz user-105=health2045 user-106=foods user-107=leftie user-108=lkpier user-109=philmcph user-110=ctedorgu user-111=firstre5 user-112=donnychicago user-113=steakbridieme user-114=isleofwi user-115=smrszyqg user-116=hidden user-117=nomistakes user-118=barbersh user-119=tigerlet user-120=cathski user-121=cambria1 user-122=reliable user-123=ninejimm user-124=paulmca1 user-125=pugwash user-126=howardon user-127=cwsocial user-128=hirefootballgame user-129=eugincou user-130=courseme user-131=sibtoncc user-132=asandcoc user-133=bwppodcast user-134=zebrapho user-135=steve user-136=burydropin user-137=fawcettd user-138=nsceres user-139=beauty user-140=eatspam user-141=darkstar user-142=dhyana feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 23 12:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 12:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:54 nativespace-cdp sudo[1303340]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 12:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:54 nativespace-cdp sudo[1303348]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9OpEwNNITCZnCNnc.~
Sep 23 12:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:54 nativespace-cdp sudo[1303354]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9OpEwNNITCZnCNnc.~'
Sep 23 12:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:54 nativespace-cdp sudo[1303358]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9OpEwNNITCZnCNnc.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 12:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:54 nativespace-cdp sudo[1303364]: pam_unix(sudo:session): session closed for user root
Sep 23 12:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 12:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:09:55 nativespace-cdp sudo[1303369]: pam_unix(sudo:session): session closed for user root
Sep 23 12:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 12:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 12:10:03 nativespace-cdp sudo[1303498]: pam_unix(sudo:session): session closed for user root
Sep 23 12:11:35 nativespace-cdp sshd[1303876]: Connection closed by 159.100.136.21 port 51390 [preauth]
Sep 23 12:16:33 nativespace-cdp sshd[1305175]: Connection closed by 159.100.136.21 port 60806 [preauth]
Sep 23 12:21:33 nativespace-cdp sshd[1306616]: Connection closed by 159.100.136.21 port 42134 [preauth]
Sep 23 12:26:33 nativespace-cdp sshd[1307733]: Connection closed by 159.100.136.21 port 50616 [preauth]
Sep 23 12:31:34 nativespace-cdp sshd[1309305]: Connection closed by 159.100.136.21 port 59878 [preauth]
Sep 23 12:36:38 nativespace-cdp sshd[1310683]: Connection closed by 159.100.136.21 port 41052 [preauth]
Sep 23 12:41:33 nativespace-cdp sshd[1312052]: Connection closed by 159.100.136.21 port 49960 [preauth]
Sep 23 12:46:34 nativespace-cdp sshd[1313437]: Connection closed by 159.100.136.21 port 59168 [preauth]
Sep 23 12:51:36 nativespace-cdp sshd[1314961]: Connection closed by 159.100.136.21 port 40102 [preauth]
Sep 23 12:56:33 nativespace-cdp sshd[1316182]: Connection closed by 159.100.136.21 port 50018 [preauth]
Sep 23 13:01:33 nativespace-cdp sshd[1317876]: Connection closed by 159.100.136.21 port 58906 [preauth]
Sep 23 13:06:33 nativespace-cdp sshd[1319416]: Connection closed by 159.100.136.21 port 40156 [preauth]
Sep 23 13:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 13:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:44 nativespace-cdp sudo[1320247]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 13:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:44 nativespace-cdp sudo[1320251]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 13:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:45 nativespace-cdp sshd[1320260]: Bad protocol version identification '\026\003\001' from 199.45.155.93 port 49044
Sep 23 13:09:46 nativespace-cdp sudo[1320256]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 13:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:46 nativespace-cdp sudo[1320268]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 13:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:48 nativespace-cdp sshd[1320283]: Bad protocol version identification 'GET / HTTP/1.1' from 199.45.155.93 port 49054
Sep 23 13:09:49 nativespace-cdp sudo[1320275]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:49 nativespace-cdp sudo[1320288]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:49 nativespace-cdp sudo[1320293]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:49 nativespace-cdp sudo[1320297]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:49 nativespace-cdp sudo[1320302]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:49 nativespace-cdp sudo[1320308]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 13:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:50 nativespace-cdp sudo[1320313]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 13:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:52 nativespace-cdp sudo[1320330]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 13:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:52 nativespace-cdp sudo[1320336]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=lbscrmod user-3=maflemin user-4=vantagep user-5=athenare user-6=connect9 user-7=markward user-8=booff user-9=foundation user-10=leereyn1 user-11=stephani user-12=agproduc user-13=still user-14=hodgesonweb user-15=theblack user-16=spectrum user-17=jarvisin user-18=megacards user-19=musorguk user-20=wilsonsw user-21=atestord user-22=sarafoundation user-23=strathar user-24=brmrjxl user-25=lakesan1 user-26=magichat user-27=hhdugcor user-28=lbhyisi user-29=ptkxhsbt user-30=dickemery123 user-31=martsblo user-32=highlegh user-33=southlon user-34=firstred user-35=costestimatorco user-36=clarkass user-37=firstrel user-38=opaiscyx user-39=coursemc user-40=firstres user-41=ultbcrra user-42=jonhartl user-43=seftvta user-44=thqkgnbz user-45=connectedshoppin user-46=ianrayne user-47=accooper
Sep 23 13:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=fetch user-49=carsinyo user-50=hubmaster user-51=elecleis user-52=gilpin user-53=milloyco user-54=bemadonn user-55=newstoda user-56=ggaaorgu user-57=belle user-58=bedfords user-59=oneoarco user-60=battlere user-61=vivienn1 user-62=firstre2 user-63=nstriton user-64=brighto1 user-65=nativene user-66=askhform user-67=stuartge user-68=innovat1 user-69=alexadmin user-70=skyfirec user-71=steve user-72=zebrapho user-73=bwppodcast user-74=sibtoncc user-75=asandcoc user-76=dhyana user-77=darkstar user-78=eatspam user-79=beauty user-80=nsceres user-81=fawcettd user-82=burydropin user-83=barbersh user-84=tigerlet user-85=nomistakes user-86=hidden user-87=smrszyqg user-88=isleofwi user-89=donnychicago user-90=steakbridieme user-91=firstre5 user-92=ctedorgu user-93=philmcph user-94=lkpier user-95=leftie user-96=foods user-97=health2045 user-98=fortunaz user-99=nscdp user-100=courseme user-101=eugincou
Sep 23 13:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hirefootballgame user-103=cwsocial user-104=paulmca1 user-105=pugwash user-106=howardon user-107=ninejimm user-108=reliable user-109=cathski user-110=cambria1 user-111=david user-112=nbhavers user-113=careers user-114=mcdermos user-115=chrisdal user-116=jennimil user-117=tomandle user-118=romaldki user-119=branko user-120=ranxterc user-121=hodgsonmail user-122=outdoorc user-123=onlycont user-124=lucy user-125=attlebor user-126=crrtipdl user-127=sosevalu user-128=bakery user-129=boldover user-130=nove user-131=design user-132=kategilpin user-133=stagingerris user-134=dancinggardener user-135=ladburyp user-136=nvihkvu user-137=havantho user-138=sketchy user-139=cath user-140=what user-141=oubpgvbx user-142=tstardom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 23 13:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 13:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:54 nativespace-cdp sudo[1320342]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 13:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:54 nativespace-cdp sudo[1320350]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yVZOoRsk0l98AylV.~
Sep 23 13:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:54 nativespace-cdp sudo[1320356]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yVZOoRsk0l98AylV.~'
Sep 23 13:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:54 nativespace-cdp sudo[1320360]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yVZOoRsk0l98AylV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 13:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:54 nativespace-cdp sudo[1320366]: pam_unix(sudo:session): session closed for user root
Sep 23 13:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 13:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:09:54 nativespace-cdp sudo[1320371]: pam_unix(sudo:session): session closed for user root
Sep 23 13:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 13:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 13:10:18 nativespace-cdp sudo[1320580]: pam_unix(sudo:session): session closed for user root
Sep 23 13:10:19 nativespace-cdp sshd[1320403]: Connection closed by 199.45.155.93 port 33468 [preauth]
Sep 23 13:11:33 nativespace-cdp sshd[1321013]: Connection closed by 159.100.136.21 port 49584 [preauth]
Sep 23 13:15:48 nativespace-cdp crond[1321615]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 23 13:15:48 nativespace-cdp crond[1321614]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 23 13:16:34 nativespace-cdp sshd[1323510]: Connection closed by 159.100.136.21 port 58794 [preauth]
Sep 23 13:21:36 nativespace-cdp sshd[1325845]: Connection closed by 159.100.136.21 port 39668 [preauth]
Sep 23 13:26:35 nativespace-cdp sshd[1328076]: Connection closed by 159.100.136.21 port 48566 [preauth]
Sep 23 13:31:33 nativespace-cdp sshd[1331031]: Connection closed by 159.100.136.21 port 57504 [preauth]
Sep 23 13:36:34 nativespace-cdp sshd[1333654]: Connection closed by 159.100.136.21 port 38628 [preauth]
Sep 23 13:41:33 nativespace-cdp sshd[1336404]: Connection closed by 159.100.136.21 port 48156 [preauth]
Sep 23 13:46:35 nativespace-cdp sshd[1337876]: Connection closed by 159.100.136.21 port 57764 [preauth]
Sep 23 13:51:33 nativespace-cdp sshd[1339047]: Connection closed by 159.100.136.21 port 39158 [preauth]
Sep 23 13:56:35 nativespace-cdp sshd[1340309]: Connection closed by 159.100.136.21 port 48528 [preauth]
Sep 23 14:01:35 nativespace-cdp sshd[1341649]: Connection closed by 159.100.136.21 port 58188 [preauth]
Sep 23 14:06:33 nativespace-cdp sshd[1343089]: Connection closed by 159.100.136.21 port 39874 [preauth]
Sep 23 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:54 nativespace-cdp sudo[1343955]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:54 nativespace-cdp sudo[1343959]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:56 nativespace-cdp sudo[1343964]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:56 nativespace-cdp sudo[1343973]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:58 nativespace-cdp sudo[1343979]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:58 nativespace-cdp sudo[1344000]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:58 nativespace-cdp sudo[1344005]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:58 nativespace-cdp sudo[1344009]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:58 nativespace-cdp sudo[1344014]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:58 nativespace-cdp sudo[1344019]: pam_unix(sudo:session): session closed for user root
Sep 23 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:09:58 nativespace-cdp sudo[1344025]: pam_unix(sudo:session): session closed for user root
Sep 23 14:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 14:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:10:07 nativespace-cdp sudo[1344166]: pam_unix(sudo:session): session closed for user root
Sep 23 14:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 14:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:10:08 nativespace-cdp sudo[1344173]: pam_unix(sudo:session): session closed for user root
Sep 23 14:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ctedorgu user-2=philmcph user-3=firstre5 user-4=donnychicago user-5=steakbridieme user-6=lkpier user-7=fortunaz user-8=health2045 user-9=foods user-10=leftie user-11=nscdp user-12=barbersh user-13=tigerlet user-14=hidden user-15=nomistakes user-16=isleofwi user-17=smrszyqg user-18=howardon user-19=pugwash user-20=paulmca1 user-21=cwsocial user-22=reliable user-23=ninejimm user-24=cathski user-25=cambria1 user-26=courseme user-27=eugincou user-28=hirefootballgame user-29=sibtoncc user-30=asandcoc user-31=steve user-32=zebrapho user-33=bwppodcast user-34=nsceres user-35=burydropin user-36=fawcettd user-37=dhyana user-38=eatspam user-39=darkstar user-40=beauty user-41=boldover user-42=nove user-43=sosevalu user-44=crrtipdl user-45=bakery user-46=nvihkvu user-47=sketchy user-48=cath user-49=havantho
Sep 23 14:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=what user-51=tstardom user-52=oubpgvbx user-53=design user-54=kategilpin user-55=ladburyp user-56=stagingerris user-57=dancinggardener user-58=jennimil user-59=tomandle user-60=nbhavers user-61=careers user-62=david user-63=mcdermos user-64=chrisdal user-65=onlycont user-66=attlebor user-67=lucy user-68=romaldki user-69=branko user-70=ranxterc user-71=outdoorc user-72=hodgsonmail user-73=sarafoundation user-74=atestord user-75=strathar user-76=lakesan1 user-77=brmrjxl user-78=musorguk user-79=megacards user-80=wilsonsw user-81=ptkxhsbt user-82=dickemery123 user-83=martsblo user-84=magichat user-85=lbhyisi user-86=hhdugcor user-87=maflemin user-88=lbscrmod user-89=athenare user-90=connect9 user-91=vantagep user-92=booff user-93=markward user-94=foundation user-95=ulsukarm user-96=theblack user-97=hodgesonweb user-98=spectrum user-99=jarvisin user-100=leereyn1 user-101=stephani user-102=still
Sep 23 14:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=agproduc user-104=battlere user-105=oneoarco user-106=firstre2 user-107=vivienn1 user-108=brighto1 user-109=nstriton user-110=bemadonn user-111=belle user-112=ggaaorgu user-113=newstoda user-114=bedfords user-115=skyfirec user-116=alexadmin user-117=nativene user-118=askhform user-119=stuartge user-120=innovat1 user-121=coursemc user-122=opaiscyx user-123=firstres user-124=jonhartl user-125=seftvta user-126=ultbcrra user-127=southlon user-128=highlegh user-129=firstred user-130=costestimatorco user-131=clarkass user-132=firstrel user-133=carsinyo user-134=fetch user-135=hubmaster user-136=elecleis user-137=gilpin user-138=milloyco user-139=thqkgnbz user-140=connectedshoppin user-141=ianrayne user-142=accooper feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 14:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 14:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:10:09 nativespace-cdp sudo[1344180]: pam_unix(sudo:session): session closed for user root
Sep 23 14:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 14:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:10:09 nativespace-cdp sudo[1344187]: pam_unix(sudo:session): session closed for user root
Sep 23 14:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ff2AM6Dg6XByMPcF.~
Sep 23 14:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:10:10 nativespace-cdp sudo[1344190]: pam_unix(sudo:session): session closed for user root
Sep 23 14:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ff2AM6Dg6XByMPcF.~'
Sep 23 14:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:10:10 nativespace-cdp sudo[1344193]: pam_unix(sudo:session): session closed for user root
Sep 23 14:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ff2AM6Dg6XByMPcF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 14:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:10:10 nativespace-cdp sudo[1344197]: pam_unix(sudo:session): session closed for user root
Sep 23 14:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 14:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:10:10 nativespace-cdp sudo[1344200]: pam_unix(sudo:session): session closed for user root
Sep 23 14:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 14:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 14:10:24 nativespace-cdp sudo[1344254]: pam_unix(sudo:session): session closed for user root
Sep 23 14:11:33 nativespace-cdp sshd[1344483]: Connection closed by 159.100.136.21 port 48268 [preauth]
Sep 23 14:16:33 nativespace-cdp sshd[1345964]: Connection closed by 159.100.136.21 port 57718 [preauth]
Sep 23 14:21:33 nativespace-cdp sshd[1347071]: Connection closed by 159.100.136.21 port 39280 [preauth]
Sep 23 14:26:33 nativespace-cdp sshd[1348403]: Connection closed by 159.100.136.21 port 48500 [preauth]
Sep 23 14:31:33 nativespace-cdp sshd[1349961]: Connection closed by 159.100.136.21 port 58068 [preauth]
Sep 23 14:36:34 nativespace-cdp sshd[1351293]: Connection closed by 159.100.136.21 port 39102 [preauth]
Sep 23 14:41:33 nativespace-cdp sshd[1352556]: Connection closed by 159.100.136.21 port 48722 [preauth]
Sep 23 14:46:36 nativespace-cdp sshd[1354021]: Connection closed by 159.100.136.21 port 58416 [preauth]
Sep 23 14:51:33 nativespace-cdp sshd[1355276]: Connection closed by 159.100.136.21 port 39560 [preauth]
Sep 23 14:56:33 nativespace-cdp sshd[1356404]: Connection closed by 159.100.136.21 port 49434 [preauth]
Sep 23 15:01:33 nativespace-cdp sshd[1357749]: Connection closed by 159.100.136.21 port 59044 [preauth]
Sep 23 15:06:33 nativespace-cdp sshd[1359373]: Connection closed by 159.100.136.21 port 40200 [preauth]
Sep 23 15:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 15:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:09:55 nativespace-cdp sudo[1360152]: pam_unix(sudo:session): session closed for user root
Sep 23 15:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 15:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:09:55 nativespace-cdp sudo[1360160]: pam_unix(sudo:session): session closed for user root
Sep 23 15:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 15:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:09:57 nativespace-cdp sudo[1360169]: pam_unix(sudo:session): session closed for user root
Sep 23 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:09:57 nativespace-cdp sudo[1360187]: pam_unix(sudo:session): session closed for user root
Sep 23 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:01 nativespace-cdp sudo[1360193]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:02 nativespace-cdp sudo[1360317]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:02 nativespace-cdp sudo[1360324]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:02 nativespace-cdp sudo[1360327]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:02 nativespace-cdp sudo[1360330]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:02 nativespace-cdp sudo[1360333]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:02 nativespace-cdp sudo[1360340]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 15:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:04 nativespace-cdp sudo[1360357]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 15:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:07 nativespace-cdp sudo[1360363]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=wilsonsw user-2=megacards user-3=musorguk user-4=lakesan1 user-5=brmrjxl user-6=strathar user-7=atestord user-8=sarafoundation user-9=hhdugcor user-10=lbhyisi user-11=magichat user-12=martsblo user-13=dickemery123 user-14=ptkxhsbt user-15=ulsukarm user-16=booff user-17=foundation user-18=markward user-19=vantagep user-20=connect9 user-21=athenare user-22=lbscrmod user-23=maflemin user-24=agproduc user-25=still user-26=stephani user-27=leereyn1 user-28=jarvisin user-29=spectrum user-30=hodgesonweb user-31=theblack user-32=bedfords user-33=newstoda user-34=ggaaorgu user-35=belle user-36=bemadonn user-37=nstriton user-38=brighto1 user-39=vivienn1 user-40=firstre2 user-41=oneoarco user-42=battlere user-43=innovat1 user-44=stuartge user-45=askhform user-46=nativene user-47=skyfirec user-48=alexadmin
Sep 23 15:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstrel user-50=clarkass user-51=costestimatorco user-52=firstred user-53=highlegh user-54=southlon user-55=ultbcrra user-56=seftvta user-57=jonhartl user-58=firstres user-59=opaiscyx user-60=coursemc user-61=accooper user-62=ianrayne user-63=connectedshoppin user-64=thqkgnbz user-65=gilpin user-66=milloyco user-67=elecleis user-68=hubmaster user-69=fetch user-70=carsinyo user-71=smrszyqg user-72=isleofwi user-73=nomistakes user-74=hidden user-75=tigerlet user-76=barbersh user-77=nscdp user-78=leftie user-79=foods user-80=fortunaz user-81=health2045 user-82=lkpier user-83=steakbridieme user-84=donnychicago user-85=firstre5 user-86=philmcph user-87=ctedorgu user-88=hirefootballgame user-89=eugincou user-90=courseme user-91=cathski user-92=cambria1 user-93=reliable user-94=ninejimm user-95=cwsocial user-96=howardon user-97=paulmca1 user-98=pugwash user-99=bwppodcast user-100=zebrapho user-101=steve
Sep 23 15:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=sibtoncc user-103=asandcoc user-104=beauty user-105=darkstar user-106=eatspam user-107=dhyana user-108=fawcettd user-109=burydropin user-110=nsceres user-111=bakery user-112=crrtipdl user-113=sosevalu user-114=nove user-115=boldover user-116=dancinggardener user-117=stagingerris user-118=ladburyp user-119=kategilpin user-120=design user-121=tstardom user-122=oubpgvbx user-123=what user-124=havantho user-125=cath user-126=sketchy user-127=nvihkvu user-128=chrisdal user-129=mcdermos user-130=david user-131=careers user-132=nbhavers user-133=tomandle user-134=jennimil user-135=ranxterc user-136=hodgsonmail user-137=outdoorc user-138=branko user-139=romaldki user-140=lucy user-141=attlebor user-142=onlycont feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 15:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 15:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:09 nativespace-cdp sudo[1360375]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 15:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:10 nativespace-cdp sudo[1360383]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nEjF6iKEKhoinpHm.~
Sep 23 15:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:10 nativespace-cdp sudo[1360387]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nEjF6iKEKhoinpHm.~'
Sep 23 15:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:10 nativespace-cdp sudo[1360390]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nEjF6iKEKhoinpHm.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 15:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:10 nativespace-cdp sudo[1360394]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 15:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:10 nativespace-cdp sudo[1360397]: pam_unix(sudo:session): session closed for user root
Sep 23 15:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 15:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 15:10:30 nativespace-cdp sudo[1360527]: pam_unix(sudo:session): session closed for user root
Sep 23 15:11:34 nativespace-cdp sshd[1360732]: Connection closed by 159.100.136.21 port 49822 [preauth]
Sep 23 15:16:33 nativespace-cdp sshd[1362210]: Connection closed by 159.100.136.21 port 59304 [preauth]
Sep 23 15:21:33 nativespace-cdp sshd[1363368]: Connection closed by 159.100.136.21 port 40758 [preauth]
Sep 23 15:26:33 nativespace-cdp sshd[1364547]: Connection closed by 159.100.136.21 port 50654 [preauth]
Sep 23 15:31:33 nativespace-cdp sshd[1365917]: Connection closed by 159.100.136.21 port 59942 [preauth]
Sep 23 15:36:33 nativespace-cdp sshd[1367218]: Connection closed by 159.100.136.21 port 41614 [preauth]
Sep 23 15:41:35 nativespace-cdp sshd[1368393]: Connection closed by 159.100.136.21 port 51336 [preauth]
Sep 23 15:51:33 nativespace-cdp sshd[1370689]: Connection closed by 159.100.136.21 port 40546 [preauth]
Sep 23 15:56:33 nativespace-cdp sshd[1372036]: Connection closed by 159.100.136.21 port 50102 [preauth]
Sep 23 16:01:33 nativespace-cdp sshd[1373542]: Connection closed by 159.100.136.21 port 58690 [preauth]
Sep 23 16:06:33 nativespace-cdp sshd[1374689]: Connection closed by 159.100.136.21 port 40544 [preauth]
Sep 23 16:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 16:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:52 nativespace-cdp sudo[1375322]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 16:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:52 nativespace-cdp sudo[1375326]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 16:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:53 nativespace-cdp sudo[1375331]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 16:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:53 nativespace-cdp sudo[1375343]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 16:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:56 nativespace-cdp sudo[1375349]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:56 nativespace-cdp sudo[1375363]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:56 nativespace-cdp sudo[1375368]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:56 nativespace-cdp sudo[1375372]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:57 nativespace-cdp sudo[1375378]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:57 nativespace-cdp sudo[1375384]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:57 nativespace-cdp sudo[1375389]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 16:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:59 nativespace-cdp sudo[1375404]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 16:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:09:59 nativespace-cdp sudo[1375411]: pam_unix(sudo:session): session closed for user root
Sep 23 16:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hubmaster user-2=carsinyo user-3=fetch user-4=milloyco user-5=gilpin user-6=elecleis user-7=connectedshoppin user-8=thqkgnbz user-9=accooper user-10=ianrayne user-11=coursemc user-12=opaiscyx user-13=seftvta user-14=jonhartl user-15=ultbcrra user-16=firstres user-17=firstred user-18=southlon user-19=highlegh user-20=clarkass user-21=firstrel user-22=costestimatorco user-23=skyfirec user-24=alexadmin user-25=nativene user-26=innovat1 user-27=askhform user-28=stuartge user-29=firstre2 user-30=vivienn1 user-31=battlere user-32=oneoarco user-33=brighto1 user-34=nstriton user-35=ggaaorgu user-36=belle user-37=newstoda user-38=bemadonn user-39=bedfords user-40=spectrum user-41=hodgesonweb user-42=theblack user-43=jarvisin user-44=stephani user-45=leereyn1 user-46=still user-47=agproduc
Sep 23 16:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=connect9 user-49=athenare user-50=vantagep user-51=maflemin user-52=lbscrmod user-53=booff user-54=foundation user-55=markward user-56=ulsukarm user-57=dickemery123 user-58=ptkxhsbt user-59=martsblo user-60=magichat user-61=lbhyisi user-62=hhdugcor user-63=strathar user-64=sarafoundation user-65=atestord user-66=brmrjxl user-67=lakesan1 user-68=musorguk user-69=megacards user-70=wilsonsw user-71=onlycont user-72=attlebor user-73=lucy user-74=romaldki user-75=ranxterc user-76=outdoorc user-77=hodgsonmail user-78=branko user-79=jennimil user-80=tomandle user-81=nbhavers user-82=careers user-83=david user-84=chrisdal user-85=mcdermos user-86=sketchy user-87=cath user-88=havantho user-89=nvihkvu user-90=tstardom user-91=oubpgvbx user-92=what user-93=design user-94=ladburyp user-95=stagingerris user-96=dancinggardener user-97=kategilpin user-98=boldover user-99=nove user-100=bakery user-101=sosevalu
Sep 23 16:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=nsceres user-104=burydropin user-105=fawcettd user-106=dhyana user-107=beauty user-108=eatspam user-109=darkstar user-110=asandcoc user-111=sibtoncc user-112=steve user-113=bwppodcast user-114=zebrapho user-115=howardon user-116=pugwash user-117=paulmca1 user-118=cwsocial user-119=cambria1 user-120=cathski user-121=reliable user-122=ninejimm user-123=eugincou user-124=courseme user-125=hirefootballgame user-126=lkpier user-127=ctedorgu user-128=philmcph user-129=firstre5 user-130=donnychicago user-131=steakbridieme user-132=nscdp user-133=fortunaz user-134=health2045 user-135=leftie user-136=foods user-137=hidden user-138=nomistakes user-139=tigerlet user-140=barbersh user-141=isleofwi user-142=smrszyqg feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 23 16:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 16:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:10:00 nativespace-cdp sudo[1375418]: pam_unix(sudo:session): session closed for user root
Sep 23 16:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 16:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:10:00 nativespace-cdp sudo[1375434]: pam_unix(sudo:session): session closed for user root
Sep 23 16:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zXkxqzjK8KKFZVq8.~
Sep 23 16:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:10:00 nativespace-cdp sudo[1375439]: pam_unix(sudo:session): session closed for user root
Sep 23 16:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zXkxqzjK8KKFZVq8.~'
Sep 23 16:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:10:00 nativespace-cdp sudo[1375443]: pam_unix(sudo:session): session closed for user root
Sep 23 16:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zXkxqzjK8KKFZVq8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 16:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:10:00 nativespace-cdp sudo[1375449]: pam_unix(sudo:session): session closed for user root
Sep 23 16:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 16:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:10:00 nativespace-cdp sudo[1375454]: pam_unix(sudo:session): session closed for user root
Sep 23 16:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 16:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 16:10:22 nativespace-cdp sudo[1375725]: pam_unix(sudo:session): session closed for user root
Sep 23 16:11:33 nativespace-cdp sshd[1376117]: Connection closed by 159.100.136.21 port 50268 [preauth]
Sep 23 16:16:35 nativespace-cdp sshd[1377605]: Connection closed by 159.100.136.21 port 59206 [preauth]
Sep 23 16:21:34 nativespace-cdp sshd[1378964]: Connection closed by 159.100.136.21 port 40112 [preauth]
Sep 23 16:26:33 nativespace-cdp sshd[1380086]: Connection closed by 159.100.136.21 port 49636 [preauth]
Sep 23 16:31:33 nativespace-cdp sshd[1381402]: Connection closed by 159.100.136.21 port 59400 [preauth]
Sep 23 16:36:33 nativespace-cdp sshd[1382523]: Connection closed by 159.100.136.21 port 41052 [preauth]
Sep 23 16:41:33 nativespace-cdp sshd[1383693]: Connection closed by 159.100.136.21 port 50336 [preauth]
Sep 23 16:46:33 nativespace-cdp sshd[1385001]: Connection closed by 159.100.136.21 port 59820 [preauth]
Sep 23 16:51:33 nativespace-cdp sshd[1386217]: Connection closed by 159.100.136.21 port 41098 [preauth]
Sep 23 16:56:33 nativespace-cdp sshd[1387276]: Connection closed by 159.100.136.21 port 50564 [preauth]
Sep 23 17:01:34 nativespace-cdp sshd[1388759]: Connection closed by 159.100.136.21 port 59494 [preauth]
Sep 23 17:06:33 nativespace-cdp sshd[1389833]: Connection closed by 159.100.136.21 port 41020 [preauth]
Sep 23 17:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 17:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:53 nativespace-cdp sudo[1390492]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 17:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:53 nativespace-cdp sudo[1390497]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 17:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:55 nativespace-cdp sudo[1390502]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 17:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:55 nativespace-cdp sudo[1390513]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 17:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:58 nativespace-cdp sudo[1390519]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:58 nativespace-cdp sudo[1390543]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:58 nativespace-cdp sudo[1390548]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:58 nativespace-cdp sudo[1390552]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:58 nativespace-cdp sudo[1390557]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:58 nativespace-cdp sudo[1390562]: pam_unix(sudo:session): session closed for user root
Sep 23 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:09:59 nativespace-cdp sudo[1390568]: pam_unix(sudo:session): session closed for user root
Sep 23 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:10:06 nativespace-cdp sudo[1390712]: pam_unix(sudo:session): session closed for user root
Sep 23 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:10:07 nativespace-cdp sudo[1390716]: pam_unix(sudo:session): session closed for user root
Sep 23 17:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=lakesan1 user-2=brmrjxl user-3=strathar user-4=sarafoundation user-5=atestord user-6=wilsonsw user-7=musorguk user-8=megacards user-9=martsblo user-10=dickemery123 user-11=ptkxhsbt user-12=lbhyisi user-13=hhdugcor user-14=magichat user-15=booff user-16=markward user-17=foundation user-18=connect9 user-19=athenare user-20=vantagep user-21=maflemin user-22=lbscrmod user-23=ulsukarm user-24=jarvisin user-25=spectrum user-26=theblack user-27=hodgesonweb user-28=still user-29=agproduc user-30=stephani user-31=leereyn1 user-32=brighto1 user-33=nstriton user-34=firstre2 user-35=vivienn1 user-36=battlere user-37=oneoarco user-38=bedfords user-39=ggaaorgu user-40=belle user-41=newstoda user-42=bemadonn user-43=alexadmin user-44=skyfirec user-45=innovat1 user-46=askhform user-47=stuartge user-48=nativene
Sep 23 17:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jonhartl user-50=seftvta user-51=ultbcrra user-52=firstres user-53=opaiscyx user-54=coursemc user-55=firstrel user-56=clarkass user-57=costestimatorco user-58=firstred user-59=southlon user-60=highlegh user-61=gilpin user-62=milloyco user-63=elecleis user-64=hubmaster user-65=carsinyo user-66=fetch user-67=accooper user-68=ianrayne user-69=connectedshoppin user-70=thqkgnbz user-71=nscdp user-72=fortunaz user-73=health2045 user-74=leftie user-75=foods user-76=lkpier user-77=philmcph user-78=ctedorgu user-79=firstre5 user-80=donnychicago user-81=steakbridieme user-82=smrszyqg user-83=isleofwi user-84=hidden user-85=nomistakes user-86=barbersh user-87=tigerlet user-88=cambria1 user-89=cathski user-90=ninejimm user-91=reliable user-92=paulmca1 user-93=pugwash user-94=howardon user-95=cwsocial user-96=hirefootballgame user-97=eugincou user-98=courseme user-99=asandcoc user-100=sibtoncc user-101=bwppodcast
Sep 23 17:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=steve user-104=burydropin user-105=fawcettd user-106=nsceres user-107=beauty user-108=eatspam user-109=darkstar user-110=dhyana user-111=nove user-112=boldover user-113=bakery user-114=sosevalu user-115=crrtipdl user-116=oubpgvbx user-117=tstardom user-118=what user-119=cath user-120=sketchy user-121=havantho user-122=nvihkvu user-123=ladburyp user-124=stagingerris user-125=dancinggardener user-126=kategilpin user-127=design user-128=tomandle user-129=jennimil user-130=chrisdal user-131=mcdermos user-132=nbhavers user-133=careers user-134=david user-135=attlebor user-136=lucy user-137=onlycont user-138=hodgsonmail user-139=ranxterc user-140=outdoorc user-141=branko user-142=romaldki feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 17:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 17:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:10:09 nativespace-cdp sudo[1390722]: pam_unix(sudo:session): session closed for user root
Sep 23 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:10:10 nativespace-cdp sudo[1390778]: pam_unix(sudo:session): session closed for user root
Sep 23 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3UZDm0u0tcrd8TBN.~
Sep 23 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:10:10 nativespace-cdp sudo[1390784]: pam_unix(sudo:session): session closed for user root
Sep 23 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3UZDm0u0tcrd8TBN.~'
Sep 23 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:10:10 nativespace-cdp sudo[1390788]: pam_unix(sudo:session): session closed for user root
Sep 23 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3UZDm0u0tcrd8TBN.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:10:10 nativespace-cdp sudo[1390794]: pam_unix(sudo:session): session closed for user root
Sep 23 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:10:10 nativespace-cdp sudo[1390799]: pam_unix(sudo:session): session closed for user root
Sep 23 17:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 17:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 17:10:19 nativespace-cdp sudo[1390843]: pam_unix(sudo:session): session closed for user root
Sep 23 17:11:33 nativespace-cdp sshd[1391158]: Connection closed by 159.100.136.21 port 50266 [preauth]
Sep 23 17:16:33 nativespace-cdp sshd[1392486]: Connection closed by 159.100.136.21 port 60036 [preauth]
Sep 23 17:21:33 nativespace-cdp sshd[1393747]: Connection closed by 159.100.136.21 port 41068 [preauth]
Sep 23 17:26:33 nativespace-cdp sshd[1394835]: Connection closed by 159.100.136.21 port 50770 [preauth]
Sep 23 17:31:33 nativespace-cdp sshd[1396314]: Connection closed by 159.100.136.21 port 60510 [preauth]
Sep 23 17:36:33 nativespace-cdp sshd[1397473]: Connection closed by 159.100.136.21 port 41084 [preauth]
Sep 23 17:41:33 nativespace-cdp sshd[1398705]: Connection closed by 159.100.136.21 port 50388 [preauth]
Sep 23 17:46:36 nativespace-cdp sshd[1400600]: Connection closed by 159.100.136.21 port 59846 [preauth]
Sep 23 17:51:33 nativespace-cdp sshd[1401741]: Connection closed by 159.100.136.21 port 40628 [preauth]
Sep 23 17:56:36 nativespace-cdp sshd[1402919]: Connection closed by 159.100.136.21 port 50072 [preauth]
Sep 23 18:01:33 nativespace-cdp sshd[1404500]: Connection closed by 159.100.136.21 port 59372 [preauth]
Sep 23 18:06:35 nativespace-cdp sshd[1405779]: Connection closed by 159.100.136.21 port 40624 [preauth]
Sep 23 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:54 nativespace-cdp sudo[1406487]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:54 nativespace-cdp sudo[1406493]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:55 nativespace-cdp sudo[1406498]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 18:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:55 nativespace-cdp sudo[1406505]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 18:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:59 nativespace-cdp sudo[1406511]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:59 nativespace-cdp sudo[1406533]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:59 nativespace-cdp sudo[1406538]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:59 nativespace-cdp sudo[1406542]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:59 nativespace-cdp sudo[1406547]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:59 nativespace-cdp sudo[1406553]: pam_unix(sudo:session): session closed for user root
Sep 23 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:09:59 nativespace-cdp sudo[1406558]: pam_unix(sudo:session): session closed for user root
Sep 23 18:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 18:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:10:02 nativespace-cdp sudo[1406683]: pam_unix(sudo:session): session closed for user root
Sep 23 18:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 18:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:10:03 nativespace-cdp sudo[1406734]: pam_unix(sudo:session): session closed for user root
Sep 23 18:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jonhartl user-2=seftvta user-3=ultbcrra user-4=firstres user-5=opaiscyx user-6=coursemc user-7=firstrel user-8=clarkass user-9=costestimatorco user-10=firstred user-11=southlon user-12=highlegh user-13=milloyco user-14=gilpin user-15=elecleis user-16=hubmaster user-17=carsinyo user-18=fetch user-19=accooper user-20=ianrayne user-21=connectedshoppin user-22=thqkgnbz user-23=brighto1 user-24=nstriton user-25=firstre2 user-26=vivienn1 user-27=battlere user-28=oneoarco user-29=bedfords user-30=belle user-31=ggaaorgu user-32=newstoda user-33=bemadonn user-34=skyfirec user-35=alexadmin user-36=innovat1 user-37=askhform user-38=stuartge user-39=nativene user-40=booff user-41=foundation user-42=markward user-43=connect9 user-44=athenare user-45=vantagep user-46=maflemin user-47=lbscrmod user-48=ulsukarm
Sep 23 18:10:03 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jarvisin user-50=spectrum user-51=theblack user-52=hodgesonweb user-53=still user-54=agproduc user-55=stephani user-56=leereyn1 user-57=brmrjxl user-58=lakesan1 user-59=strathar user-60=sarafoundation user-61=atestord user-62=wilsonsw user-63=musorguk user-64=megacards user-65=martsblo user-66=dickemery123 user-67=ptkxhsbt user-68=lbhyisi user-69=hhdugcor user-70=magichat user-71=tomandle user-72=jennimil user-73=chrisdal user-74=mcdermos user-75=nbhavers user-76=careers user-77=david user-78=attlebor user-79=lucy user-80=onlycont user-81=outdoorc user-82=hodgsonmail user-83=ranxterc user-84=branko user-85=romaldki user-86=nove user-87=boldover user-88=bakery user-89=sosevalu user-90=crrtipdl user-91=oubpgvbx user-92=tstardom user-93=what user-94=sketchy user-95=cath user-96=havantho user-97=nvihkvu user-98=ladburyp user-99=dancinggardener user-100=stagingerris user-101=kategilpin user-102=design
Sep 23 18:10:03 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=asandcoc user-104=sibtoncc user-105=bwppodcast user-106=zebrapho user-107=steve user-108=burydropin user-109=fawcettd user-110=nsceres user-111=beauty user-112=eatspam user-113=darkstar user-114=dhyana user-115=nscdp user-116=health2045 user-117=fortunaz user-118=foods user-119=leftie user-120=lkpier user-121=ctedorgu user-122=philmcph user-123=firstre5 user-124=steakbridieme user-125=donnychicago user-126=isleofwi user-127=smrszyqg user-128=hidden user-129=nomistakes user-130=barbersh user-131=tigerlet user-132=cambria1 user-133=cathski user-134=reliable user-135=ninejimm user-136=pugwash user-137=howardon user-138=paulmca1 user-139=cwsocial user-140=hirefootballgame user-141=eugincou user-142=courseme feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 18:10:03 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 18:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:10:05 nativespace-cdp sudo[1406740]: pam_unix(sudo:session): session closed for user root
Sep 23 18:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 18:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:10:05 nativespace-cdp sudo[1406771]: pam_unix(sudo:session): session closed for user root
Sep 23 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pqEcc5l89CpWPyxT.~
Sep 23 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:10:06 nativespace-cdp sudo[1406776]: pam_unix(sudo:session): session closed for user root
Sep 23 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pqEcc5l89CpWPyxT.~'
Sep 23 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:10:06 nativespace-cdp sudo[1406780]: pam_unix(sudo:session): session closed for user root
Sep 23 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pqEcc5l89CpWPyxT.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:10:06 nativespace-cdp sudo[1406786]: pam_unix(sudo:session): session closed for user root
Sep 23 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:10:06 nativespace-cdp sudo[1406791]: pam_unix(sudo:session): session closed for user root
Sep 23 18:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 18:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 18:10:08 nativespace-cdp sudo[1406814]: pam_unix(sudo:session): session closed for user root
Sep 23 18:11:33 nativespace-cdp sshd[1407165]: Connection closed by 159.100.136.21 port 48714 [preauth]
Sep 23 18:16:33 nativespace-cdp sshd[1408461]: Connection closed by 159.100.136.21 port 57734 [preauth]
Sep 23 18:21:33 nativespace-cdp sshd[1409635]: Connection closed by 159.100.136.21 port 38682 [preauth]
Sep 23 18:26:33 nativespace-cdp sshd[1410731]: Connection closed by 159.100.136.21 port 48374 [preauth]
Sep 23 18:31:33 nativespace-cdp sshd[1412231]: Connection closed by 159.100.136.21 port 57764 [preauth]
Sep 23 18:36:33 nativespace-cdp sshd[1413505]: Connection closed by 159.100.136.21 port 38894 [preauth]
Sep 23 18:41:33 nativespace-cdp sshd[1415498]: Connection closed by 159.100.136.21 port 48338 [preauth]
Sep 23 18:46:34 nativespace-cdp sshd[1416795]: Connection closed by 159.100.136.21 port 58278 [preauth]
Sep 23 18:51:33 nativespace-cdp sshd[1417939]: Connection closed by 159.100.136.21 port 39356 [preauth]
Sep 23 18:56:34 nativespace-cdp sshd[1418962]: Connection closed by 159.100.136.21 port 49054 [preauth]
Sep 23 19:01:33 nativespace-cdp sshd[1420018]: Connection closed by 159.100.136.21 port 58002 [preauth]
Sep 23 19:06:33 nativespace-cdp sshd[1421354]: Connection closed by 159.100.136.21 port 39080 [preauth]
Sep 23 19:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 19:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:51 nativespace-cdp sudo[1421976]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 19:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:51 nativespace-cdp sudo[1421981]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 19:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:52 nativespace-cdp sudo[1421986]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 19:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:52 nativespace-cdp sudo[1421995]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 19:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:56 nativespace-cdp sudo[1422001]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:56 nativespace-cdp sudo[1422012]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:56 nativespace-cdp sudo[1422018]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:56 nativespace-cdp sudo[1422022]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:56 nativespace-cdp sudo[1422027]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:56 nativespace-cdp sudo[1422032]: pam_unix(sudo:session): session closed for user root
Sep 23 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:09:56 nativespace-cdp sudo[1422038]: pam_unix(sudo:session): session closed for user root
Sep 23 19:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 19:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:10:04 nativespace-cdp sudo[1422191]: pam_unix(sudo:session): session closed for user root
Sep 23 19:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 19:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:10:04 nativespace-cdp sudo[1422196]: pam_unix(sudo:session): session closed for user root
Sep 23 19:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=markward user-3=booff user-4=foundation user-5=athenare user-6=connect9 user-7=vantagep user-8=maflemin user-9=lbscrmod user-10=still user-11=agproduc user-12=stephani user-13=leereyn1 user-14=jarvisin user-15=spectrum user-16=theblack user-17=hodgesonweb user-18=wilsonsw user-19=musorguk user-20=megacards user-21=lakesan1 user-22=brmrjxl user-23=strathar user-24=sarafoundation user-25=atestord user-26=lbhyisi user-27=hhdugcor user-28=magichat user-29=martsblo user-30=dickemery123 user-31=ptkxhsbt user-32=clarkass user-33=firstrel user-34=costestimatorco user-35=firstred user-36=southlon user-37=highlegh user-38=jonhartl user-39=seftvta user-40=ultbcrra user-41=firstres user-42=coursemc user-43=opaiscyx user-44=accooper user-45=ianrayne user-46=connectedshoppin user-47=thqkgnbz
Sep 23 19:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=gilpin user-49=milloyco user-50=elecleis user-51=hubmaster user-52=carsinyo user-53=fetch user-54=bedfords user-55=belle user-56=ggaaorgu user-57=newstoda user-58=bemadonn user-59=brighto1 user-60=nstriton user-61=firstre2 user-62=vivienn1 user-63=battlere user-64=oneoarco user-65=innovat1 user-66=stuartge user-67=askhform user-68=nativene user-69=skyfirec user-70=alexadmin user-71=bwppodcast user-72=zebrapho user-73=steve user-74=sibtoncc user-75=asandcoc user-76=beauty user-77=eatspam user-78=darkstar user-79=dhyana user-80=burydropin user-81=fawcettd user-82=nsceres user-83=isleofwi user-84=smrszyqg user-85=hidden user-86=nomistakes user-87=tigerlet user-88=barbersh user-89=nscdp user-90=health2045 user-91=fortunaz user-92=foods user-93=leftie user-94=lkpier user-95=ctedorgu user-96=philmcph user-97=steakbridieme user-98=donnychicago user-99=firstre5 user-100=hirefootballgame user-101=eugincou
Sep 23 19:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=courseme user-103=cathski user-104=cambria1 user-105=reliable user-106=ninejimm user-107=paulmca1 user-108=howardon user-109=pugwash user-110=cwsocial user-111=chrisdal user-112=mcdermos user-113=careers user-114=nbhavers user-115=david user-116=tomandle user-117=jennimil user-118=hodgsonmail user-119=ranxterc user-120=outdoorc user-121=branko user-122=romaldki user-123=attlebor user-124=lucy user-125=onlycont user-126=bakery user-127=sosevalu user-128=crrtipdl user-129=nove user-130=boldover user-131=ladburyp user-132=stagingerris user-133=dancinggardener user-134=kategilpin user-135=design user-136=tstardom user-137=oubpgvbx user-138=what user-139=sketchy user-140=cath user-141=havantho user-142=nvihkvu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 19:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 19:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:10:05 nativespace-cdp sudo[1422202]: pam_unix(sudo:session): session closed for user root
Sep 23 19:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 19:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:10:06 nativespace-cdp sudo[1422208]: pam_unix(sudo:session): session closed for user root
Sep 23 19:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mYuLAbmUb59Kle8g.~
Sep 23 19:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:10:06 nativespace-cdp sudo[1422211]: pam_unix(sudo:session): session closed for user root
Sep 23 19:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mYuLAbmUb59Kle8g.~'
Sep 23 19:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:10:06 nativespace-cdp sudo[1422214]: pam_unix(sudo:session): session closed for user root
Sep 23 19:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mYuLAbmUb59Kle8g.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 19:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:10:06 nativespace-cdp sudo[1422218]: pam_unix(sudo:session): session closed for user root
Sep 23 19:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 19:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:10:06 nativespace-cdp sudo[1422222]: pam_unix(sudo:session): session closed for user root
Sep 23 19:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 19:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 19:10:13 nativespace-cdp sudo[1422273]: pam_unix(sudo:session): session closed for user root
Sep 23 19:11:34 nativespace-cdp sshd[1422628]: Connection closed by 159.100.136.21 port 48606 [preauth]
Sep 23 19:17:08 nativespace-cdp CROND[1423580]: pam_systemd(crond:session): Failed to release session: Input/output error
Sep 23 19:17:12 nativespace-cdp sshd[1423910]: Did not receive identification string from 159.100.136.21 port 58258
Sep 23 19:21:33 nativespace-cdp sshd[1425093]: Connection closed by 159.100.136.21 port 38924 [preauth]
Sep 23 19:26:33 nativespace-cdp sshd[1426218]: Connection closed by 159.100.136.21 port 48400 [preauth]
Sep 23 19:31:33 nativespace-cdp sshd[1427461]: Connection closed by 159.100.136.21 port 57686 [preauth]
Sep 23 19:36:33 nativespace-cdp sshd[1428704]: Connection closed by 159.100.136.21 port 39054 [preauth]
Sep 23 19:41:33 nativespace-cdp sshd[1429852]: Connection closed by 159.100.136.21 port 47876 [preauth]
Sep 23 19:46:33 nativespace-cdp sshd[1431377]: Connection closed by 159.100.136.21 port 57290 [preauth]
Sep 23 19:51:33 nativespace-cdp sshd[1432562]: Connection closed by 159.100.136.21 port 38030 [preauth]
Sep 23 19:56:33 nativespace-cdp sshd[1433730]: Connection closed by 159.100.136.21 port 47526 [preauth]
Sep 23 20:01:36 nativespace-cdp sshd[1435127]: Connection closed by 159.100.136.21 port 56638 [preauth]
Sep 23 20:06:33 nativespace-cdp sshd[1436133]: Connection closed by 159.100.136.21 port 37246 [preauth]
Sep 23 20:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 20:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:12 nativespace-cdp sudo[1436724]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 20:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:12 nativespace-cdp sudo[1436727]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 20:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:14 nativespace-cdp sudo[1436730]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 20:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:14 nativespace-cdp sudo[1436736]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 20:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:16 nativespace-cdp sudo[1436739]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:16 nativespace-cdp sudo[1436770]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:16 nativespace-cdp sudo[1436773]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:16 nativespace-cdp sudo[1436776]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:16 nativespace-cdp sudo[1436779]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:16 nativespace-cdp sudo[1436784]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:16 nativespace-cdp sudo[1436787]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 20:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:27 nativespace-cdp sudo[1436810]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 20:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:27 nativespace-cdp sudo[1436815]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hhdugcor user-2=lbhyisi user-3=magichat user-4=martsblo user-5=dickemery123 user-6=ptkxhsbt user-7=wilsonsw user-8=megacards user-9=musorguk user-10=lakesan1 user-11=brmrjxl user-12=strathar user-13=atestord user-14=sarafoundation user-15=agproduc user-16=still user-17=stephani user-18=leereyn1 user-19=jarvisin user-20=spectrum user-21=hodgesonweb user-22=theblack user-23=ulsukarm user-24=booff user-25=foundation user-26=markward user-27=vantagep user-28=athenare user-29=connect9 user-30=lbscrmod user-31=maflemin user-32=innovat1 user-33=askhform user-34=stuartge user-35=nativene user-36=skyfirec user-37=alexadmin user-38=bedfords user-39=newstoda user-40=belle user-41=ggaaorgu user-42=bemadonn user-43=nstriton user-44=brighto1 user-45=vivienn1 user-46=firstre2 user-47=oneoarco user-48=battlere
Sep 23 20:09:27 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=accooper user-50=ianrayne user-51=connectedshoppin user-52=thqkgnbz user-53=milloyco user-54=gilpin user-55=elecleis user-56=hubmaster user-57=fetch user-58=carsinyo user-59=firstrel user-60=clarkass user-61=costestimatorco user-62=firstred user-63=highlegh user-64=southlon user-65=ultbcrra user-66=seftvta user-67=jonhartl user-68=firstres user-69=coursemc user-70=opaiscyx user-71=hirefootballgame user-72=eugincou user-73=courseme user-74=cambria1 user-75=cathski user-76=ninejimm user-77=reliable user-78=cwsocial user-79=howardon user-80=paulmca1 user-81=pugwash user-82=smrszyqg user-83=isleofwi user-84=nomistakes user-85=hidden user-86=barbersh user-87=tigerlet user-88=nscdp user-89=foods user-90=leftie user-91=fortunaz user-92=health2045 user-93=lkpier user-94=donnychicago user-95=firstre5 user-96=steakbridieme user-97=philmcph user-98=ctedorgu user-99=beauty user-100=darkstar user-101=eatspam
Sep 23 20:09:27 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=fawcettd user-104=burydropin user-105=nsceres user-106=bwppodcast user-107=zebrapho user-108=steve user-109=sibtoncc user-110=asandcoc user-111=dancinggardener user-112=stagingerris user-113=ladburyp user-114=kategilpin user-115=design user-116=oubpgvbx user-117=tstardom user-118=what user-119=havantho user-120=sketchy user-121=cath user-122=nvihkvu user-123=bakery user-124=crrtipdl user-125=sosevalu user-126=nove user-127=boldover user-128=hodgsonmail user-129=ranxterc user-130=outdoorc user-131=branko user-132=romaldki user-133=lucy user-134=attlebor user-135=onlycont user-136=chrisdal user-137=mcdermos user-138=david user-139=careers user-140=nbhavers user-141=tomandle user-142=jennimil feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 20:09:27 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 20:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:28 nativespace-cdp sudo[1436820]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 20:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:29 nativespace-cdp sudo[1436828]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qx0Pom1XMwGpZZDY.~
Sep 23 20:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:29 nativespace-cdp sudo[1436831]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qx0Pom1XMwGpZZDY.~'
Sep 23 20:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:29 nativespace-cdp sudo[1436834]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qx0Pom1XMwGpZZDY.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 20:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:29 nativespace-cdp sudo[1436838]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 20:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:29 nativespace-cdp sudo[1436842]: pam_unix(sudo:session): session closed for user root
Sep 23 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 20:09:41 nativespace-cdp sudo[1436904]: pam_unix(sudo:session): session closed for user root
Sep 23 20:11:33 nativespace-cdp sshd[1437408]: Connection closed by 159.100.136.21 port 46116 [preauth]
Sep 23 20:16:36 nativespace-cdp sshd[1438708]: Connection closed by 159.100.136.21 port 55726 [preauth]
Sep 23 20:21:33 nativespace-cdp sshd[1440086]: Connection closed by 159.100.136.21 port 36846 [preauth]
Sep 23 20:26:33 nativespace-cdp sshd[1441264]: Connection closed by 159.100.136.21 port 46106 [preauth]
Sep 23 20:31:33 nativespace-cdp sshd[1443036]: Connection closed by 159.100.136.21 port 55436 [preauth]
Sep 23 20:36:33 nativespace-cdp sshd[1444408]: Connection closed by 159.100.136.21 port 36278 [preauth]
Sep 23 20:41:33 nativespace-cdp sshd[1445645]: Connection closed by 159.100.136.21 port 45460 [preauth]
Sep 23 20:46:33 nativespace-cdp sshd[1447098]: Connection closed by 159.100.136.21 port 54566 [preauth]
Sep 23 20:51:33 nativespace-cdp sshd[1448143]: Connection closed by 159.100.136.21 port 35056 [preauth]
Sep 23 20:56:33 nativespace-cdp sshd[1449210]: Connection closed by 159.100.136.21 port 43964 [preauth]
Sep 23 21:01:33 nativespace-cdp sshd[1450726]: Connection closed by 159.100.136.21 port 52776 [preauth]
Sep 23 21:06:33 nativespace-cdp sshd[1451876]: Connection closed by 159.100.136.21 port 33920 [preauth]
Sep 23 21:07:26 nativespace-cdp sshd[1452028]: Invalid user iptv from 217.114.43.10 port 33258
Sep 23 21:07:26 nativespace-cdp sshd[1452028]: input_userauth_request: invalid user iptv [preauth]
Sep 23 21:07:26 nativespace-cdp sshd[1452028]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:07:26 nativespace-cdp sshd[1452028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.114.43.10
Sep 23 21:07:28 nativespace-cdp sshd[1452028]: Failed password for invalid user iptv from 217.114.43.10 port 33258 ssh2
Sep 23 21:07:28 nativespace-cdp sshd[1452028]: Received disconnect from 217.114.43.10 port 33258:11: Bye Bye [preauth]
Sep 23 21:07:28 nativespace-cdp sshd[1452028]: Disconnected from 217.114.43.10 port 33258 [preauth]
Sep 23 21:08:55 nativespace-cdp sshd[1452391]: Invalid user sysadmin from 66.59.196.9 port 50218
Sep 23 21:08:55 nativespace-cdp sshd[1452391]: input_userauth_request: invalid user sysadmin [preauth]
Sep 23 21:08:55 nativespace-cdp sshd[1452391]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:08:55 nativespace-cdp sshd[1452391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.59.196.9
Sep 23 21:08:56 nativespace-cdp sshd[1452391]: Failed password for invalid user sysadmin from 66.59.196.9 port 50218 ssh2
Sep 23 21:08:56 nativespace-cdp sshd[1452391]: Received disconnect from 66.59.196.9 port 50218:11: Bye Bye [preauth]
Sep 23 21:08:56 nativespace-cdp sshd[1452391]: Disconnected from 66.59.196.9 port 50218 [preauth]
Sep 23 21:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 21:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:29 nativespace-cdp sudo[1452511]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 21:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:29 nativespace-cdp sudo[1452515]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 21:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:32 nativespace-cdp sudo[1452518]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 21:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:32 nativespace-cdp sudo[1452537]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 21:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:37 nativespace-cdp sudo[1452541]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:37 nativespace-cdp sudo[1452558]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:37 nativespace-cdp sudo[1452561]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:37 nativespace-cdp sudo[1452564]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:37 nativespace-cdp sudo[1452567]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:37 nativespace-cdp sudo[1452570]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:37 nativespace-cdp sudo[1452573]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 21:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:39 nativespace-cdp sudo[1452584]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 21:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:40 nativespace-cdp sudo[1452589]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=magichat user-2=lbhyisi user-3=hhdugcor user-4=ptkxhsbt user-5=dickemery123 user-6=martsblo user-7=musorguk user-8=megacards user-9=wilsonsw user-10=sarafoundation user-11=atestord user-12=strathar user-13=brmrjxl user-14=lakesan1 user-15=leereyn1 user-16=stephani user-17=still user-18=agproduc user-19=hodgesonweb user-20=theblack user-21=spectrum user-22=jarvisin user-23=ulsukarm user-24=maflemin user-25=lbscrmod user-26=connect9 user-27=athenare user-28=vantagep user-29=markward user-30=booff user-31=foundation user-32=nativene user-33=stuartge user-34=askhform user-35=innovat1 user-36=skyfirec user-37=alexadmin user-38=bemadonn user-39=ggaaorgu user-40=belle user-41=newstoda user-42=bedfords user-43=battlere user-44=oneoarco user-45=firstre2 user-46=vivienn1 user-47=brighto1 user-48=nstriton
Sep 23 21:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=thqkgnbz user-50=connectedshoppin user-51=ianrayne user-52=accooper user-53=carsinyo user-54=fetch user-55=hubmaster user-56=elecleis user-57=milloyco user-58=gilpin user-59=southlon user-60=highlegh user-61=firstred user-62=costestimatorco user-63=clarkass user-64=firstrel user-65=coursemc user-66=opaiscyx user-67=firstres user-68=jonhartl user-69=seftvta user-70=ultbcrra user-71=courseme user-72=eugincou user-73=hirefootballgame user-74=pugwash user-75=howardon user-76=paulmca1 user-77=cwsocial user-78=ninejimm user-79=reliable user-80=cathski user-81=cambria1 user-82=barbersh user-83=tigerlet user-84=hidden user-85=nomistakes user-86=smrszyqg user-87=isleofwi user-88=ctedorgu user-89=philmcph user-90=donnychicago user-91=firstre5 user-92=steakbridieme user-93=lkpier user-94=fortunaz user-95=health2045 user-96=foods user-97=leftie user-98=nscdp user-99=dhyana user-100=eatspam user-101=darkstar
Sep 23 21:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=beauty user-103=nsceres user-104=burydropin user-105=fawcettd user-106=steve user-107=zebrapho user-108=bwppodcast user-109=sibtoncc user-110=asandcoc user-111=design user-112=kategilpin user-113=ladburyp user-114=stagingerris user-115=dancinggardener user-116=nvihkvu user-117=sketchy user-118=cath user-119=havantho user-120=what user-121=oubpgvbx user-122=tstardom user-123=sosevalu user-124=crrtipdl user-125=bakery user-126=boldover user-127=nove user-128=romaldki user-129=branko user-130=hodgsonmail user-131=ranxterc user-132=outdoorc user-133=onlycont user-134=attlebor user-135=lucy user-136=careers user-137=nbhavers user-138=david user-139=mcdermos user-140=chrisdal user-141=jennimil user-142=tomandle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 21:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 21:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:42 nativespace-cdp sudo[1452597]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:42 nativespace-cdp sudo[1452604]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qBEmpvm59TZAKitt.~
Sep 23 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:42 nativespace-cdp sudo[1452608]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qBEmpvm59TZAKitt.~'
Sep 23 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:42 nativespace-cdp sudo[1452612]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qBEmpvm59TZAKitt.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:42 nativespace-cdp sudo[1452616]: pam_unix(sudo:session): session closed for user root
Sep 23 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:09:42 nativespace-cdp sudo[1452619]: pam_unix(sudo:session): session closed for user root
Sep 23 21:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 21:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:10:00 nativespace-cdp sudo[1452695]: pam_unix(sudo:session): session closed for user root
Sep 23 21:11:03 nativespace-cdp sshd[1453060]: Invalid user nextcloud from 123.58.214.42 port 47318
Sep 23 21:11:03 nativespace-cdp sshd[1453060]: input_userauth_request: invalid user nextcloud [preauth]
Sep 23 21:11:03 nativespace-cdp sshd[1453060]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:11:03 nativespace-cdp sshd[1453060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.214.42
Sep 23 21:11:04 nativespace-cdp sshd[1453068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.40.143  user=root
Sep 23 21:11:04 nativespace-cdp sshd[1453068]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 21:11:05 nativespace-cdp sshd[1453060]: Failed password for invalid user nextcloud from 123.58.214.42 port 47318 ssh2
Sep 23 21:11:06 nativespace-cdp sshd[1453068]: Failed password for root from 54.37.40.143 port 39494 ssh2
Sep 23 21:11:09 nativespace-cdp sshd[1453068]: Received disconnect from 54.37.40.143 port 39494:11: Bye Bye [preauth]
Sep 23 21:11:09 nativespace-cdp sshd[1453068]: Disconnected from 54.37.40.143 port 39494 [preauth]
Sep 23 21:11:10 nativespace-cdp sshd[1453060]: Received disconnect from 123.58.214.42 port 47318:11: Bye Bye [preauth]
Sep 23 21:11:10 nativespace-cdp sshd[1453060]: Disconnected from 123.58.214.42 port 47318 [preauth]
Sep 23 21:11:33 nativespace-cdp sshd[1453178]: Connection closed by 159.100.136.21 port 43116 [preauth]
Sep 23 21:12:01 nativespace-cdp sshd[1453269]: Invalid user elemental from 217.114.43.10 port 54762
Sep 23 21:12:01 nativespace-cdp sshd[1453269]: input_userauth_request: invalid user elemental [preauth]
Sep 23 21:12:01 nativespace-cdp sshd[1453269]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:12:01 nativespace-cdp sshd[1453269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.114.43.10
Sep 23 21:12:03 nativespace-cdp sshd[1453269]: Failed password for invalid user elemental from 217.114.43.10 port 54762 ssh2
Sep 23 21:12:03 nativespace-cdp sshd[1453269]: Received disconnect from 217.114.43.10 port 54762:11: Bye Bye [preauth]
Sep 23 21:12:03 nativespace-cdp sshd[1453269]: Disconnected from 217.114.43.10 port 54762 [preauth]
Sep 23 21:12:13 nativespace-cdp sshd[1453298]: Received disconnect from 66.59.196.9 port 56808:11: Bye Bye [preauth]
Sep 23 21:12:13 nativespace-cdp sshd[1453298]: Disconnected from 66.59.196.9 port 56808 [preauth]
Sep 23 21:12:24 nativespace-cdp sshd[1453352]: Invalid user ionguest from 54.37.40.143 port 39162
Sep 23 21:12:24 nativespace-cdp sshd[1453352]: input_userauth_request: invalid user ionguest [preauth]
Sep 23 21:12:24 nativespace-cdp sshd[1453352]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:12:24 nativespace-cdp sshd[1453352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.40.143
Sep 23 21:12:26 nativespace-cdp sshd[1453352]: Failed password for invalid user ionguest from 54.37.40.143 port 39162 ssh2
Sep 23 21:12:26 nativespace-cdp sshd[1453352]: Received disconnect from 54.37.40.143 port 39162:11: Bye Bye [preauth]
Sep 23 21:12:26 nativespace-cdp sshd[1453352]: Disconnected from 54.37.40.143 port 39162 [preauth]
Sep 23 21:12:42 nativespace-cdp sshd[1453492]: Invalid user reza from 217.114.43.10 port 56450
Sep 23 21:12:42 nativespace-cdp sshd[1453492]: input_userauth_request: invalid user reza [preauth]
Sep 23 21:12:42 nativespace-cdp sshd[1453492]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:12:42 nativespace-cdp sshd[1453492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.114.43.10
Sep 23 21:12:43 nativespace-cdp sshd[1453492]: Failed password for invalid user reza from 217.114.43.10 port 56450 ssh2
Sep 23 21:12:44 nativespace-cdp sshd[1453492]: Received disconnect from 217.114.43.10 port 56450:11: Bye Bye [preauth]
Sep 23 21:12:44 nativespace-cdp sshd[1453492]: Disconnected from 217.114.43.10 port 56450 [preauth]
Sep 23 21:12:50 nativespace-cdp sshd[1453536]: Invalid user steam from 66.59.196.9 port 41322
Sep 23 21:12:50 nativespace-cdp sshd[1453536]: input_userauth_request: invalid user steam [preauth]
Sep 23 21:12:50 nativespace-cdp sshd[1453536]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:12:50 nativespace-cdp sshd[1453536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.59.196.9
Sep 23 21:12:51 nativespace-cdp sshd[1453536]: Failed password for invalid user steam from 66.59.196.9 port 41322 ssh2
Sep 23 21:12:51 nativespace-cdp sshd[1453539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.214.42  user=root
Sep 23 21:12:51 nativespace-cdp sshd[1453539]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 21:12:51 nativespace-cdp sshd[1453536]: Received disconnect from 66.59.196.9 port 41322:11: Bye Bye [preauth]
Sep 23 21:12:51 nativespace-cdp sshd[1453536]: Disconnected from 66.59.196.9 port 41322 [preauth]
Sep 23 21:12:54 nativespace-cdp sshd[1453539]: Failed password for root from 123.58.214.42 port 39032 ssh2
Sep 23 21:12:54 nativespace-cdp sshd[1453539]: Received disconnect from 123.58.214.42 port 39032:11: Bye Bye [preauth]
Sep 23 21:12:54 nativespace-cdp sshd[1453539]: Disconnected from 123.58.214.42 port 39032 [preauth]
Sep 23 21:13:02 nativespace-cdp sshd[1453583]: Invalid user koha from 54.37.40.143 port 51018
Sep 23 21:13:02 nativespace-cdp sshd[1453583]: input_userauth_request: invalid user koha [preauth]
Sep 23 21:13:02 nativespace-cdp sshd[1453583]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:13:02 nativespace-cdp sshd[1453583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.40.143
Sep 23 21:13:04 nativespace-cdp sshd[1453583]: Failed password for invalid user koha from 54.37.40.143 port 51018 ssh2
Sep 23 21:13:27 nativespace-cdp sshd[1453685]: Invalid user sammy from 66.59.196.9 port 54066
Sep 23 21:13:27 nativespace-cdp sshd[1453685]: input_userauth_request: invalid user sammy [preauth]
Sep 23 21:13:27 nativespace-cdp sshd[1453685]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:13:27 nativespace-cdp sshd[1453685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.59.196.9
Sep 23 21:13:29 nativespace-cdp sshd[1453685]: Failed password for invalid user sammy from 66.59.196.9 port 54066 ssh2
Sep 23 21:14:42 nativespace-cdp sshd[1453943]: Received disconnect from 123.58.214.42 port 35936:11: Bye Bye [preauth]
Sep 23 21:14:42 nativespace-cdp sshd[1453943]: Disconnected from 123.58.214.42 port 35936 [preauth]
Sep 23 21:16:21 nativespace-cdp sshd[1454392]: Invalid user minecraft from 123.58.214.42 port 32832
Sep 23 21:16:21 nativespace-cdp sshd[1454392]: input_userauth_request: invalid user minecraft [preauth]
Sep 23 21:16:21 nativespace-cdp sshd[1454392]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 21:16:21 nativespace-cdp sshd[1454392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.214.42
Sep 23 21:16:23 nativespace-cdp sshd[1454392]: Failed password for invalid user minecraft from 123.58.214.42 port 32832 ssh2
Sep 23 21:16:23 nativespace-cdp sshd[1454392]: Received disconnect from 123.58.214.42 port 32832:11: Bye Bye [preauth]
Sep 23 21:16:23 nativespace-cdp sshd[1454392]: Disconnected from 123.58.214.42 port 32832 [preauth]
Sep 23 21:16:37 nativespace-cdp sshd[1454464]: Connection closed by 159.100.136.21 port 52508 [preauth]
Sep 23 21:21:33 nativespace-cdp sshd[1455758]: Connection closed by 159.100.136.21 port 33186 [preauth]
Sep 23 21:26:34 nativespace-cdp sshd[1456797]: Connection closed by 159.100.136.21 port 42698 [preauth]
Sep 23 21:31:33 nativespace-cdp sshd[1458207]: Connection closed by 159.100.136.21 port 51904 [preauth]
Sep 23 21:36:33 nativespace-cdp sshd[1459415]: Connection closed by 159.100.136.21 port 33314 [preauth]
Sep 23 21:41:33 nativespace-cdp sshd[1460493]: Connection closed by 159.100.136.21 port 42418 [preauth]
Sep 23 21:42:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 21:42:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:42:06 nativespace-cdp sudo[1460652]: pam_unix(sudo:session): session closed for user root
Sep 23 21:42:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status careers
Sep 23 21:42:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:42:07 nativespace-cdp sudo[1460657]: pam_unix(sudo:session): session closed for user root
Sep 23 21:42:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 21:42:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:42:08 nativespace-cdp sudo[1460669]: pam_unix(sudo:session): session closed for user root
Sep 23 21:42:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status eatspam
Sep 23 21:42:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:42:08 nativespace-cdp sudo[1460674]: pam_unix(sudo:session): session closed for user root
Sep 23 21:42:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 21:42:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:42:09 nativespace-cdp sudo[1460687]: pam_unix(sudo:session): session closed for user root
Sep 23 21:42:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status hodgesonweb
Sep 23 21:42:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:42:10 nativespace-cdp sudo[1460691]: pam_unix(sudo:session): session closed for user root
Sep 23 21:44:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 21:44:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:45:02 nativespace-cdp sudo[1461750]: pam_unix(sudo:session): session closed for user root
Sep 23 21:45:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lakesan1
Sep 23 21:45:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:45:16 nativespace-cdp sudo[1461853]: pam_unix(sudo:session): session closed for user root
Sep 23 21:46:33 nativespace-cdp sshd[1462306]: Connection closed by 159.100.136.21 port 51678 [preauth]
Sep 23 21:48:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 21:48:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:48:03 nativespace-cdp sudo[1462674]: pam_unix(sudo:session): session closed for user root
Sep 23 21:48:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status branko
Sep 23 21:48:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 21:48:03 nativespace-cdp sudo[1462678]: pam_unix(sudo:session): session closed for user root
Sep 23 21:51:33 nativespace-cdp sshd[1463684]: Connection closed by 159.100.136.21 port 32840 [preauth]
Sep 23 21:56:33 nativespace-cdp sshd[1464698]: Connection closed by 159.100.136.21 port 42700 [preauth]
Sep 23 22:01:35 nativespace-cdp sshd[1466275]: Connection closed by 159.100.136.21 port 52168 [preauth]
Sep 23 22:06:12 nativespace-cdp sshd[1467357]: Invalid user test from 91.92.253.178 port 54360
Sep 23 22:06:12 nativespace-cdp sshd[1467357]: input_userauth_request: invalid user test [preauth]
Sep 23 22:06:12 nativespace-cdp sshd[1467357]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:06:12 nativespace-cdp sshd[1467357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.253.178
Sep 23 22:06:14 nativespace-cdp sshd[1467357]: Failed password for invalid user test from 91.92.253.178 port 54360 ssh2
Sep 23 22:06:14 nativespace-cdp sshd[1467357]: Received disconnect from 91.92.253.178 port 54360:11: Bye Bye [preauth]
Sep 23 22:06:14 nativespace-cdp sshd[1467357]: Disconnected from 91.92.253.178 port 54360 [preauth]
Sep 23 22:06:33 nativespace-cdp sshd[1467448]: Connection closed by 159.100.136.21 port 33360 [preauth]
Sep 23 22:08:38 nativespace-cdp sshd[1467959]: Invalid user test from 91.92.253.178 port 53592
Sep 23 22:08:38 nativespace-cdp sshd[1467959]: input_userauth_request: invalid user test [preauth]
Sep 23 22:08:38 nativespace-cdp sshd[1467959]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:08:38 nativespace-cdp sshd[1467959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.253.178
Sep 23 22:08:40 nativespace-cdp sshd[1467959]: Failed password for invalid user test from 91.92.253.178 port 53592 ssh2
Sep 23 22:08:40 nativespace-cdp sshd[1467959]: Received disconnect from 91.92.253.178 port 53592:11: Bye Bye [preauth]
Sep 23 22:08:40 nativespace-cdp sshd[1467959]: Disconnected from 91.92.253.178 port 53592 [preauth]
Sep 23 22:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 22:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:09 nativespace-cdp sudo[1468084]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 22:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:09 nativespace-cdp sudo[1468088]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 22:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:10 nativespace-cdp sudo[1468091]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 22:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:10 nativespace-cdp sudo[1468097]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 22:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:12 nativespace-cdp sudo[1468100]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 22:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:12 nativespace-cdp sudo[1468111]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 22:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:12 nativespace-cdp sudo[1468114]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 22:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:12 nativespace-cdp sudo[1468117]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 22:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:12 nativespace-cdp sudo[1468120]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 22:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:12 nativespace-cdp sudo[1468123]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 22:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:12 nativespace-cdp sudo[1468126]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:14 nativespace-cdp sshd[1468133]: Invalid user test from 91.92.253.178 port 37956
Sep 23 22:09:14 nativespace-cdp sshd[1468133]: input_userauth_request: invalid user test [preauth]
Sep 23 22:09:14 nativespace-cdp sshd[1468133]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:09:14 nativespace-cdp sshd[1468133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.253.178
Sep 23 22:09:17 nativespace-cdp sshd[1468133]: Failed password for invalid user test from 91.92.253.178 port 37956 ssh2
Sep 23 22:09:17 nativespace-cdp sshd[1468133]: Received disconnect from 91.92.253.178 port 37956:11: Bye Bye [preauth]
Sep 23 22:09:17 nativespace-cdp sshd[1468133]: Disconnected from 91.92.253.178 port 37956 [preauth]
Sep 23 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:20 nativespace-cdp sudo[1468163]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:20 nativespace-cdp sudo[1468173]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cambria1 user-2=cathski user-3=ninejimm user-4=reliable user-5=pugwash user-6=howardon user-7=paulmca1 user-8=cwsocial user-9=hirefootballgame user-10=eugincou user-11=courseme user-12=nscdp user-13=health2045 user-14=fortunaz user-15=leftie user-16=foods user-17=lkpier user-18=ctedorgu user-19=philmcph user-20=steakbridieme user-21=donnychicago user-22=firstre5 user-23=isleofwi user-24=smrszyqg user-25=hidden user-26=nomistakes user-27=barbersh user-28=tigerlet user-29=burydropin user-30=fawcettd user-31=nsceres user-32=beauty user-33=eatspam user-34=darkstar user-35=dhyana user-36=sibtoncc user-37=asandcoc user-38=bwppodcast user-39=zebrapho user-40=steve user-41=tstardom user-42=oubpgvbx user-43=what user-44=sketchy user-45=cath user-46=havantho user-47=nvihkvu user-48=ladburyp
Sep 23 22:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=dancinggardener user-50=stagingerris user-51=kategilpin user-52=design user-53=nove user-54=boldover user-55=bakery user-56=sosevalu user-57=crrtipdl user-58=attlebor user-59=lucy user-60=onlycont user-61=ranxterc user-62=outdoorc user-63=hodgsonmail user-64=branko user-65=romaldki user-66=tomandle user-67=jennimil user-68=chrisdal user-69=mcdermos user-70=nbhavers user-71=careers user-72=david user-73=martsblo user-74=dickemery123 user-75=ptkxhsbt user-76=lbhyisi user-77=hhdugcor user-78=magichat user-79=lakesan1 user-80=brmrjxl user-81=strathar user-82=sarafoundation user-83=atestord user-84=wilsonsw user-85=musorguk user-86=megacards user-87=jarvisin user-88=spectrum user-89=theblack user-90=hodgesonweb user-91=still user-92=agproduc user-93=stephani user-94=leereyn1 user-95=foundation user-96=booff user-97=markward user-98=connect9 user-99=athenare user-100=vantagep user-101=maflemin user-102=lbscrmod
Sep 23 22:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ulsukarm user-104=skyfirec user-105=alexadmin user-106=innovat1 user-107=stuartge user-108=askhform user-109=nativene user-110=brighto1 user-111=nstriton user-112=firstre2 user-113=vivienn1 user-114=battlere user-115=oneoarco user-116=bedfords user-117=belle user-118=ggaaorgu user-119=newstoda user-120=bemadonn user-121=gilpin user-122=milloyco user-123=elecleis user-124=hubmaster user-125=carsinyo user-126=fetch user-127=accooper user-128=ianrayne user-129=connectedshoppin user-130=thqkgnbz user-131=seftvta user-132=jonhartl user-133=ultbcrra user-134=firstres user-135=coursemc user-136=opaiscyx user-137=firstrel user-138=clarkass user-139=costestimatorco user-140=firstred user-141=southlon user-142=highlegh feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 22:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:21 nativespace-cdp sudo[1468177]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 22:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:21 nativespace-cdp sudo[1468189]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5r6YsHwC9pagcHG1.~
Sep 23 22:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:21 nativespace-cdp sudo[1468192]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5r6YsHwC9pagcHG1.~'
Sep 23 22:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:21 nativespace-cdp sudo[1468195]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5r6YsHwC9pagcHG1.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 22:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:21 nativespace-cdp sudo[1468199]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 22:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:21 nativespace-cdp sudo[1468202]: pam_unix(sudo:session): session closed for user root
Sep 23 22:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 22:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 22:09:29 nativespace-cdp sudo[1468248]: pam_unix(sudo:session): session closed for user root
Sep 23 22:11:33 nativespace-cdp sshd[1468878]: Connection closed by 159.100.136.21 port 41698 [preauth]
Sep 23 22:16:30 nativespace-cdp sshd[1470456]: Invalid user sysadmin from 187.23.69.54 port 44580
Sep 23 22:16:30 nativespace-cdp sshd[1470456]: input_userauth_request: invalid user sysadmin [preauth]
Sep 23 22:16:30 nativespace-cdp sshd[1470456]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:16:30 nativespace-cdp sshd[1470456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.23.69.54
Sep 23 22:16:32 nativespace-cdp sshd[1470456]: Failed password for invalid user sysadmin from 187.23.69.54 port 44580 ssh2
Sep 23 22:16:32 nativespace-cdp sshd[1470456]: Received disconnect from 187.23.69.54 port 44580:11: Bye Bye [preauth]
Sep 23 22:16:32 nativespace-cdp sshd[1470456]: Disconnected from 187.23.69.54 port 44580 [preauth]
Sep 23 22:16:33 nativespace-cdp sshd[1470466]: Connection closed by 159.100.136.21 port 51272 [preauth]
Sep 23 22:19:05 nativespace-cdp sshd[1470920]: Invalid user student from 45.180.136.12 port 40238
Sep 23 22:19:05 nativespace-cdp sshd[1470920]: input_userauth_request: invalid user student [preauth]
Sep 23 22:19:05 nativespace-cdp sshd[1470920]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:19:05 nativespace-cdp sshd[1470920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.180.136.12
Sep 23 22:19:07 nativespace-cdp sshd[1470920]: Failed password for invalid user student from 45.180.136.12 port 40238 ssh2
Sep 23 22:19:08 nativespace-cdp sshd[1470920]: Received disconnect from 45.180.136.12 port 40238:11: Bye Bye [preauth]
Sep 23 22:19:08 nativespace-cdp sshd[1470920]: Disconnected from 45.180.136.12 port 40238 [preauth]
Sep 23 22:19:49 nativespace-cdp sshd[1471033]: Invalid user tomcat from 211.253.10.96 port 42144
Sep 23 22:19:49 nativespace-cdp sshd[1471033]: input_userauth_request: invalid user tomcat [preauth]
Sep 23 22:19:49 nativespace-cdp sshd[1471033]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:19:49 nativespace-cdp sshd[1471033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96
Sep 23 22:19:51 nativespace-cdp sshd[1471033]: Failed password for invalid user tomcat from 211.253.10.96 port 42144 ssh2
Sep 23 22:19:51 nativespace-cdp sshd[1471033]: Received disconnect from 211.253.10.96 port 42144:11: Bye Bye [preauth]
Sep 23 22:19:51 nativespace-cdp sshd[1471033]: Disconnected from 211.253.10.96 port 42144 [preauth]
Sep 23 22:20:43 nativespace-cdp sshd[1471303]: Invalid user superman from 80.251.218.164 port 56154
Sep 23 22:20:43 nativespace-cdp sshd[1471303]: input_userauth_request: invalid user superman [preauth]
Sep 23 22:20:43 nativespace-cdp sshd[1471303]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:20:43 nativespace-cdp sshd[1471303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.251.218.164
Sep 23 22:20:45 nativespace-cdp sshd[1471303]: Failed password for invalid user superman from 80.251.218.164 port 56154 ssh2
Sep 23 22:20:45 nativespace-cdp sshd[1471303]: Received disconnect from 80.251.218.164 port 56154:11: Bye Bye [preauth]
Sep 23 22:20:45 nativespace-cdp sshd[1471303]: Disconnected from 80.251.218.164 port 56154 [preauth]
Sep 23 22:21:29 nativespace-cdp sshd[1471492]: Invalid user username from 122.3.192.83 port 8980
Sep 23 22:21:29 nativespace-cdp sshd[1471492]: input_userauth_request: invalid user username [preauth]
Sep 23 22:21:29 nativespace-cdp sshd[1471492]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:21:29 nativespace-cdp sshd[1471492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.3.192.83
Sep 23 22:21:31 nativespace-cdp sshd[1471492]: Failed password for invalid user username from 122.3.192.83 port 8980 ssh2
Sep 23 22:21:34 nativespace-cdp sshd[1471505]: Connection closed by 159.100.136.21 port 60210 [preauth]
Sep 23 22:21:35 nativespace-cdp sshd[1471492]: Received disconnect from 122.3.192.83 port 8980:11: Bye Bye [preauth]
Sep 23 22:21:35 nativespace-cdp sshd[1471492]: Disconnected from 122.3.192.83 port 8980 [preauth]
Sep 23 22:22:00 nativespace-cdp sshd[1471561]: Invalid user ubuntu from 49.49.251.233 port 51244
Sep 23 22:22:00 nativespace-cdp sshd[1471561]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 22:22:00 nativespace-cdp sshd[1471561]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:22:00 nativespace-cdp sshd[1471561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.49.251.233
Sep 23 22:22:02 nativespace-cdp sshd[1471561]: Failed password for invalid user ubuntu from 49.49.251.233 port 51244 ssh2
Sep 23 22:22:02 nativespace-cdp sshd[1471561]: Received disconnect from 49.49.251.233 port 51244:11: Bye Bye [preauth]
Sep 23 22:22:02 nativespace-cdp sshd[1471561]: Disconnected from 49.49.251.233 port 51244 [preauth]
Sep 23 22:23:35 nativespace-cdp sshd[1471915]: Invalid user ubuntu from 187.23.69.54 port 52552
Sep 23 22:23:35 nativespace-cdp sshd[1471915]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 22:23:35 nativespace-cdp sshd[1471915]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:23:35 nativespace-cdp sshd[1471915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.23.69.54
Sep 23 22:23:37 nativespace-cdp sshd[1471915]: Failed password for invalid user ubuntu from 187.23.69.54 port 52552 ssh2
Sep 23 22:23:37 nativespace-cdp sshd[1471915]: Received disconnect from 187.23.69.54 port 52552:11: Bye Bye [preauth]
Sep 23 22:23:37 nativespace-cdp sshd[1471915]: Disconnected from 187.23.69.54 port 52552 [preauth]
Sep 23 22:24:41 nativespace-cdp sshd[1472098]: Invalid user test from 45.180.136.12 port 36900
Sep 23 22:24:41 nativespace-cdp sshd[1472098]: input_userauth_request: invalid user test [preauth]
Sep 23 22:24:41 nativespace-cdp sshd[1472098]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:24:41 nativespace-cdp sshd[1472098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.180.136.12
Sep 23 22:24:42 nativespace-cdp sshd[1472089]: Connection closed by 211.253.10.96 port 38165 [preauth]
Sep 23 22:24:43 nativespace-cdp sshd[1472098]: Failed password for invalid user test from 45.180.136.12 port 36900 ssh2
Sep 23 22:24:43 nativespace-cdp sshd[1472098]: Received disconnect from 45.180.136.12 port 36900:11: Bye Bye [preauth]
Sep 23 22:24:43 nativespace-cdp sshd[1472098]: Disconnected from 45.180.136.12 port 36900 [preauth]
Sep 23 22:24:54 nativespace-cdp sshd[1472130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.49.251.233  user=root
Sep 23 22:24:54 nativespace-cdp sshd[1472130]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 22:24:56 nativespace-cdp sshd[1472130]: Failed password for root from 49.49.251.233 port 53490 ssh2
Sep 23 22:24:56 nativespace-cdp sshd[1472130]: Received disconnect from 49.49.251.233 port 53490:11: Bye Bye [preauth]
Sep 23 22:24:56 nativespace-cdp sshd[1472130]: Disconnected from 49.49.251.233 port 53490 [preauth]
Sep 23 22:24:57 nativespace-cdp sshd[1472140]: Invalid user ubuntu from 122.3.192.83 port 44252
Sep 23 22:24:57 nativespace-cdp sshd[1472140]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 22:24:57 nativespace-cdp sshd[1472140]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:24:57 nativespace-cdp sshd[1472140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.3.192.83
Sep 23 22:25:00 nativespace-cdp sshd[1472140]: Failed password for invalid user ubuntu from 122.3.192.83 port 44252 ssh2
Sep 23 22:25:00 nativespace-cdp sshd[1472140]: Received disconnect from 122.3.192.83 port 44252:11: Bye Bye [preauth]
Sep 23 22:25:00 nativespace-cdp sshd[1472140]: Disconnected from 122.3.192.83 port 44252 [preauth]
Sep 23 22:25:03 nativespace-cdp sshd[1472241]: Invalid user sopuser from 80.251.218.164 port 34066
Sep 23 22:25:03 nativespace-cdp sshd[1472241]: input_userauth_request: invalid user sopuser [preauth]
Sep 23 22:25:03 nativespace-cdp sshd[1472241]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:25:03 nativespace-cdp sshd[1472241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.251.218.164
Sep 23 22:25:06 nativespace-cdp sshd[1472241]: Failed password for invalid user sopuser from 80.251.218.164 port 34066 ssh2
Sep 23 22:25:06 nativespace-cdp sshd[1472241]: Received disconnect from 80.251.218.164 port 34066:11: Bye Bye [preauth]
Sep 23 22:25:06 nativespace-cdp sshd[1472241]: Disconnected from 80.251.218.164 port 34066 [preauth]
Sep 23 22:25:25 nativespace-cdp sshd[1472292]: Connection closed by 187.23.69.54 port 38226 [preauth]
Sep 23 22:25:27 nativespace-cdp sshd[1472303]: Invalid user ubuntu from 211.253.10.96 port 45431
Sep 23 22:25:27 nativespace-cdp sshd[1472303]: input_userauth_request: invalid user ubuntu [preauth]
Sep 23 22:25:27 nativespace-cdp sshd[1472303]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:25:27 nativespace-cdp sshd[1472303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96
Sep 23 22:25:29 nativespace-cdp sshd[1472303]: Failed password for invalid user ubuntu from 211.253.10.96 port 45431 ssh2
Sep 23 22:25:29 nativespace-cdp sshd[1472303]: Received disconnect from 211.253.10.96 port 45431:11: Bye Bye [preauth]
Sep 23 22:25:29 nativespace-cdp sshd[1472303]: Disconnected from 211.253.10.96 port 45431 [preauth]
Sep 23 22:25:32 nativespace-cdp sshd[1472362]: Invalid user test from 45.180.136.12 port 49236
Sep 23 22:25:32 nativespace-cdp sshd[1472362]: input_userauth_request: invalid user test [preauth]
Sep 23 22:25:32 nativespace-cdp sshd[1472362]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:25:32 nativespace-cdp sshd[1472362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.180.136.12
Sep 23 22:25:34 nativespace-cdp sshd[1472362]: Failed password for invalid user test from 45.180.136.12 port 49236 ssh2
Sep 23 22:25:34 nativespace-cdp sshd[1472362]: Received disconnect from 45.180.136.12 port 49236:11: Bye Bye [preauth]
Sep 23 22:25:34 nativespace-cdp sshd[1472362]: Disconnected from 45.180.136.12 port 49236 [preauth]
Sep 23 22:25:46 nativespace-cdp sshd[1472438]: Invalid user acer from 49.49.251.233 port 37960
Sep 23 22:25:46 nativespace-cdp sshd[1472438]: input_userauth_request: invalid user acer [preauth]
Sep 23 22:25:46 nativespace-cdp sshd[1472438]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:25:46 nativespace-cdp sshd[1472438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.49.251.233
Sep 23 22:25:48 nativespace-cdp sshd[1472438]: Failed password for invalid user acer from 49.49.251.233 port 37960 ssh2
Sep 23 22:25:48 nativespace-cdp sshd[1472438]: Received disconnect from 49.49.251.233 port 37960:11: Bye Bye [preauth]
Sep 23 22:25:48 nativespace-cdp sshd[1472438]: Disconnected from 49.49.251.233 port 37960 [preauth]
Sep 23 22:26:14 nativespace-cdp sshd[1472546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96  user=root
Sep 23 22:26:14 nativespace-cdp sshd[1472546]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 22:26:16 nativespace-cdp sshd[1472546]: Failed password for root from 211.253.10.96 port 52696 ssh2
Sep 23 22:26:33 nativespace-cdp sshd[1472632]: Connection closed by 159.100.136.21 port 41458 [preauth]
Sep 23 22:26:58 nativespace-cdp sshd[1472697]: Invalid user test from 80.251.218.164 port 44296
Sep 23 22:26:58 nativespace-cdp sshd[1472697]: input_userauth_request: invalid user test [preauth]
Sep 23 22:26:58 nativespace-cdp sshd[1472697]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:26:58 nativespace-cdp sshd[1472697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.251.218.164
Sep 23 22:27:00 nativespace-cdp sshd[1472697]: Failed password for invalid user test from 80.251.218.164 port 44296 ssh2
Sep 23 22:27:01 nativespace-cdp sshd[1472697]: Received disconnect from 80.251.218.164 port 44296:11: Bye Bye [preauth]
Sep 23 22:27:01 nativespace-cdp sshd[1472697]: Disconnected from 80.251.218.164 port 44296 [preauth]
Sep 23 22:27:10 nativespace-cdp sshd[1472860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.23.69.54  user=root
Sep 23 22:27:10 nativespace-cdp sshd[1472860]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 23 22:27:12 nativespace-cdp sshd[1472860]: Failed password for root from 187.23.69.54 port 52124 ssh2
Sep 23 22:27:12 nativespace-cdp sshd[1472860]: Received disconnect from 187.23.69.54 port 52124:11: Bye Bye [preauth]
Sep 23 22:27:12 nativespace-cdp sshd[1472860]: Disconnected from 187.23.69.54 port 52124 [preauth]
Sep 23 22:31:09 nativespace-cdp sshd[1474168]: Invalid user thomas from 122.3.192.83 port 57192
Sep 23 22:31:09 nativespace-cdp sshd[1474168]: input_userauth_request: invalid user thomas [preauth]
Sep 23 22:31:09 nativespace-cdp sshd[1474168]: pam_unix(sshd:auth): check pass; user unknown
Sep 23 22:31:09 nativespace-cdp sshd[1474168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.3.192.83
Sep 23 22:31:11 nativespace-cdp sshd[1474168]: Failed password for invalid user thomas from 122.3.192.83 port 57192 ssh2
Sep 23 22:31:33 nativespace-cdp sshd[1474273]: Connection closed by 159.100.136.21 port 50678 [preauth]
Sep 23 22:36:33 nativespace-cdp sshd[1475381]: Connection closed by 159.100.136.21 port 60014 [preauth]
Sep 23 22:41:33 nativespace-cdp sshd[1476584]: Connection closed by 159.100.136.21 port 40870 [preauth]
Sep 23 22:46:33 nativespace-cdp sshd[1477988]: Connection closed by 159.100.136.21 port 49874 [preauth]
Sep 23 22:51:35 nativespace-cdp sshd[1479359]: Connection closed by 159.100.136.21 port 58836 [preauth]
Sep 23 22:56:33 nativespace-cdp sshd[1480934]: Connection closed by 159.100.136.21 port 40028 [preauth]
Sep 23 23:01:33 nativespace-cdp sshd[1482478]: Connection closed by 159.100.136.21 port 49316 [preauth]
Sep 23 23:06:33 nativespace-cdp sshd[1483506]: Connection closed by 159.100.136.21 port 58800 [preauth]
Sep 23 23:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 23 23:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:15 nativespace-cdp sudo[1484182]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 23 23:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:15 nativespace-cdp sudo[1484186]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 23 23:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:17 nativespace-cdp sudo[1484189]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 23 23:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:17 nativespace-cdp sudo[1484202]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 23 23:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:24 nativespace-cdp sshd[1484239]: Bad protocol version identification '\003' from 194.165.16.73 port 65446
Sep 23 23:09:30 nativespace-cdp sudo[1484205]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 23 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:30 nativespace-cdp sudo[1484272]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 23 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:30 nativespace-cdp sudo[1484275]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 23 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:30 nativespace-cdp sudo[1484278]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 23 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:30 nativespace-cdp sudo[1484281]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 23 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:30 nativespace-cdp sudo[1484284]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 23 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:30 nativespace-cdp sudo[1484287]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 23 23:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:49 nativespace-cdp sudo[1484339]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 23 23:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:49 nativespace-cdp sudo[1484345]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=asandcoc user-2=sibtoncc user-3=steve user-4=zebrapho user-5=bwppodcast user-6=nsceres user-7=fawcettd user-8=burydropin user-9=dhyana user-10=darkstar user-11=eatspam user-12=beauty user-13=steakbridieme user-14=donnychicago user-15=firstre5 user-16=philmcph user-17=ctedorgu user-18=lkpier user-19=foods user-20=leftie user-21=fortunaz user-22=health2045 user-23=nscdp user-24=barbersh user-25=tigerlet user-26=nomistakes user-27=hidden user-28=smrszyqg user-29=isleofwi user-30=cwsocial user-31=pugwash user-32=paulmca1 user-33=howardon user-34=reliable user-35=ninejimm user-36=cathski user-37=cambria1 user-38=courseme user-39=eugincou user-40=hirefootballgame user-41=jennimil user-42=tomandle user-43=david user-44=careers user-45=nbhavers user-46=mcdermos user-47=chrisdal user-48=onlycont
Sep 23 23:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=lucy user-50=attlebor user-51=romaldki user-52=branko user-53=ranxterc user-54=hodgsonmail user-55=outdoorc user-56=boldover user-57=nove user-58=crrtipdl user-59=sosevalu user-60=bakery user-61=nvihkvu user-62=havantho user-63=sketchy user-64=cath user-65=what user-66=oubpgvbx user-67=tstardom user-68=design user-69=kategilpin user-70=stagingerris user-71=dancinggardener user-72=ladburyp user-73=lbscrmod user-74=maflemin user-75=vantagep user-76=connect9 user-77=athenare user-78=foundation user-79=booff user-80=markward user-81=ulsukarm user-82=theblack user-83=hodgesonweb user-84=spectrum user-85=jarvisin user-86=leereyn1 user-87=stephani user-88=agproduc user-89=still user-90=atestord user-91=sarafoundation user-92=strathar user-93=brmrjxl user-94=lakesan1 user-95=megacards user-96=musorguk user-97=wilsonsw user-98=ptkxhsbt user-99=dickemery123 user-100=martsblo user-101=magichat user-102=hhdugcor
Sep 23 23:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=lbhyisi user-104=opaiscyx user-105=coursemc user-106=firstres user-107=ultbcrra user-108=seftvta user-109=jonhartl user-110=highlegh user-111=southlon user-112=firstred user-113=costestimatorco user-114=clarkass user-115=firstrel user-116=fetch user-117=carsinyo user-118=hubmaster user-119=elecleis user-120=milloyco user-121=gilpin user-122=thqkgnbz user-123=connectedshoppin user-124=ianrayne user-125=accooper user-126=oneoarco user-127=battlere user-128=vivienn1 user-129=firstre2 user-130=nstriton user-131=brighto1 user-132=bemadonn user-133=newstoda user-134=ggaaorgu user-135=belle user-136=bedfords user-137=skyfirec user-138=alexadmin user-139=nativene user-140=askhform user-141=stuartge user-142=innovat1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 23 23:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 23 23:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:50 nativespace-cdp sudo[1484355]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 23:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:51 nativespace-cdp sudo[1484368]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zApJ9haK53xQK0Ao.~
Sep 23 23:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:51 nativespace-cdp sudo[1484371]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zApJ9haK53xQK0Ao.~'
Sep 23 23:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:51 nativespace-cdp sudo[1484374]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zApJ9haK53xQK0Ao.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 23 23:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:51 nativespace-cdp sudo[1484379]: pam_unix(sudo:session): session closed for user root
Sep 23 23:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 23 23:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:09:51 nativespace-cdp sudo[1484382]: pam_unix(sudo:session): session closed for user root
Sep 23 23:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 23 23:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 23 23:10:03 nativespace-cdp sudo[1484544]: pam_unix(sudo:session): session closed for user root
Sep 23 23:11:33 nativespace-cdp sshd[1484874]: Connection closed by 159.100.136.21 port 40026 [preauth]
Sep 23 23:16:33 nativespace-cdp sshd[1486323]: Connection closed by 159.100.136.21 port 49596 [preauth]
Sep 23 23:21:33 nativespace-cdp sshd[1487843]: Connection closed by 159.100.136.21 port 59032 [preauth]
Sep 23 23:26:34 nativespace-cdp sshd[1489709]: Connection closed by 159.100.136.21 port 40200 [preauth]
Sep 23 23:31:33 nativespace-cdp sshd[1491168]: Connection closed by 159.100.136.21 port 49218 [preauth]
Sep 23 23:36:33 nativespace-cdp sshd[1492246]: Connection closed by 159.100.136.21 port 58338 [preauth]
Sep 23 23:41:33 nativespace-cdp sshd[1493264]: Connection closed by 159.100.136.21 port 38454 [preauth]
Sep 23 23:46:35 nativespace-cdp sshd[1494604]: Connection closed by 159.100.136.21 port 47984 [preauth]
Sep 23 23:51:33 nativespace-cdp sshd[1495661]: Connection closed by 159.100.136.21 port 56266 [preauth]
Sep 23 23:56:33 nativespace-cdp sshd[1496697]: Connection closed by 159.100.136.21 port 36796 [preauth]
Sep 24 00:01:33 nativespace-cdp sshd[1498094]: Connection closed by 159.100.136.21 port 46076 [preauth]
Sep 24 00:06:33 nativespace-cdp sshd[1499329]: Connection closed by 159.100.136.21 port 55802 [preauth]
Sep 24 00:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 00:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:09 nativespace-cdp sudo[1499905]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 00:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:09 nativespace-cdp sudo[1499908]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 00:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:10 nativespace-cdp sudo[1499911]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 00:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:10 nativespace-cdp sudo[1499918]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 00:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:12 nativespace-cdp sudo[1499921]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 00:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:12 nativespace-cdp sudo[1499930]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 00:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:12 nativespace-cdp sudo[1499933]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 00:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:12 nativespace-cdp sudo[1499936]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 00:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:12 nativespace-cdp sudo[1499939]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 00:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:12 nativespace-cdp sudo[1499942]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 00:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:12 nativespace-cdp sudo[1499945]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 00:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:25 nativespace-cdp sudo[1499973]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 00:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:25 nativespace-cdp sudo[1499978]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cambria1 user-2=cathski user-3=ninejimm user-4=reliable user-5=cwsocial user-6=paulmca1 user-7=pugwash user-8=howardon user-9=hirefootballgame user-10=eugincou user-11=courseme user-12=nscdp user-13=foods user-14=leftie user-15=fortunaz user-16=health2045 user-17=lkpier user-18=donnychicago user-19=firstre5 user-20=steakbridieme user-21=ctedorgu user-22=philmcph user-23=isleofwi user-24=smrszyqg user-25=nomistakes user-26=hidden user-27=barbersh user-28=tigerlet user-29=fawcettd user-30=burydropin user-31=nsceres user-32=beauty user-33=darkstar user-34=eatspam user-35=dhyana user-36=sibtoncc user-37=asandcoc user-38=bwppodcast user-39=zebrapho user-40=steve user-41=oubpgvbx user-42=tstardom user-43=what user-44=havantho user-45=cath user-46=sketchy user-47=nvihkvu user-48=dancinggardener
Sep 24 00:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=stagingerris user-50=ladburyp user-51=kategilpin user-52=design user-53=nove user-54=boldover user-55=bakery user-56=crrtipdl user-57=sosevalu user-58=lucy user-59=attlebor user-60=onlycont user-61=hodgsonmail user-62=ranxterc user-63=outdoorc user-64=branko user-65=romaldki user-66=tomandle user-67=jennimil user-68=chrisdal user-69=mcdermos user-70=david user-71=nbhavers user-72=careers user-73=martsblo user-74=dickemery123 user-75=ptkxhsbt user-76=hhdugcor user-77=lbhyisi user-78=magichat user-79=lakesan1 user-80=brmrjxl user-81=strathar user-82=atestord user-83=sarafoundation user-84=wilsonsw user-85=megacards user-86=musorguk user-87=jarvisin user-88=spectrum user-89=theblack user-90=hodgesonweb user-91=agproduc user-92=still user-93=stephani user-94=leereyn1 user-95=booff user-96=markward user-97=foundation user-98=vantagep user-99=connect9 user-100=athenare user-101=lbscrmod user-102=maflemin
Sep 24 00:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ulsukarm user-104=skyfirec user-105=alexadmin user-106=innovat1 user-107=askhform user-108=stuartge user-109=nativene user-110=nstriton user-111=brighto1 user-112=vivienn1 user-113=firstre2 user-114=oneoarco user-115=battlere user-116=bedfords user-117=newstoda user-118=ggaaorgu user-119=belle user-120=bemadonn user-121=gilpin user-122=milloyco user-123=elecleis user-124=hubmaster user-125=fetch user-126=carsinyo user-127=accooper user-128=ianrayne user-129=connectedshoppin user-130=thqkgnbz user-131=ultbcrra user-132=seftvta user-133=jonhartl user-134=firstres user-135=opaiscyx user-136=coursemc user-137=clarkass user-138=firstrel user-139=costestimatorco user-140=firstred user-141=highlegh user-142=southlon feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 24 00:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 00:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:26 nativespace-cdp sudo[1499984]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:26 nativespace-cdp sudo[1499990]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uuJWxZbHacvld6Km.~
Sep 24 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:26 nativespace-cdp sudo[1499993]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uuJWxZbHacvld6Km.~'
Sep 24 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:26 nativespace-cdp sudo[1499996]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uuJWxZbHacvld6Km.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:26 nativespace-cdp sudo[1500000]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:26 nativespace-cdp sudo[1500003]: pam_unix(sudo:session): session closed for user root
Sep 24 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 00:09:30 nativespace-cdp sudo[1500028]: pam_unix(sudo:session): session closed for user root
Sep 24 00:11:33 nativespace-cdp sshd[1500529]: Connection closed by 159.100.136.21 port 36964 [preauth]
Sep 24 00:16:33 nativespace-cdp sshd[1501973]: Connection closed by 159.100.136.21 port 46612 [preauth]
Sep 24 00:21:36 nativespace-cdp sshd[1503093]: Connection closed by 159.100.136.21 port 56026 [preauth]
Sep 24 00:26:34 nativespace-cdp sshd[1504058]: Connection closed by 159.100.136.21 port 36816 [preauth]
Sep 24 00:31:35 nativespace-cdp sshd[1505433]: Connection closed by 159.100.136.21 port 46162 [preauth]
Sep 24 00:36:33 nativespace-cdp sshd[1506417]: Connection closed by 159.100.136.21 port 55122 [preauth]
Sep 24 00:41:36 nativespace-cdp sshd[1507439]: Connection closed by 159.100.136.21 port 36026 [preauth]
Sep 24 00:46:33 nativespace-cdp sshd[1508678]: Connection closed by 159.100.136.21 port 44354 [preauth]
Sep 24 00:51:33 nativespace-cdp sshd[1509763]: Connection closed by 159.100.136.21 port 52880 [preauth]
Sep 24 00:56:35 nativespace-cdp sshd[1510738]: Connection closed by 159.100.136.21 port 33452 [preauth]
Sep 24 01:01:34 nativespace-cdp sshd[1512127]: Connection closed by 159.100.136.21 port 42234 [preauth]
Sep 24 01:06:33 nativespace-cdp sshd[1513103]: Connection closed by 159.100.136.21 port 51246 [preauth]
Sep 24 01:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 01:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:09 nativespace-cdp sudo[1513619]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 01:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:09 nativespace-cdp sudo[1513622]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 01:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:10 nativespace-cdp sudo[1513625]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 01:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:10 nativespace-cdp sudo[1513630]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 01:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:13 nativespace-cdp sudo[1513633]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 01:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:13 nativespace-cdp sudo[1513644]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 01:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:13 nativespace-cdp sudo[1513647]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 01:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:13 nativespace-cdp sudo[1513650]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 01:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:13 nativespace-cdp sudo[1513653]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 01:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:13 nativespace-cdp sudo[1513656]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 01:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:13 nativespace-cdp sudo[1513660]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 01:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:17 nativespace-cdp sudo[1513675]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 01:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:17 nativespace-cdp sudo[1513679]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstres user-2=seftvta user-3=jonhartl user-4=ultbcrra user-5=opaiscyx user-6=coursemc user-7=costestimatorco user-8=firstrel user-9=clarkass user-10=southlon user-11=highlegh user-12=firstred user-13=elecleis user-14=gilpin user-15=milloyco user-16=carsinyo user-17=fetch user-18=hubmaster user-19=ianrayne user-20=accooper user-21=thqkgnbz user-22=connectedshoppin user-23=brighto1 user-24=nstriton user-25=battlere user-26=oneoarco user-27=firstre2 user-28=vivienn1 user-29=bedfords user-30=bemadonn user-31=belle user-32=ggaaorgu user-33=newstoda user-34=skyfirec user-35=alexadmin user-36=stuartge user-37=askhform user-38=innovat1 user-39=nativene user-40=booff user-41=markward user-42=foundation user-43=maflemin user-44=lbscrmod user-45=athenare user-46=connect9 user-47=vantagep user-48=ulsukarm
Sep 24 01:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jarvisin user-50=theblack user-51=hodgesonweb user-52=spectrum user-53=still user-54=agproduc user-55=leereyn1 user-56=stephani user-57=lakesan1 user-58=brmrjxl user-59=sarafoundation user-60=atestord user-61=strathar user-62=wilsonsw user-63=musorguk user-64=megacards user-65=martsblo user-66=ptkxhsbt user-67=dickemery123 user-68=lbhyisi user-69=hhdugcor user-70=magichat user-71=tomandle user-72=jennimil user-73=mcdermos user-74=chrisdal user-75=careers user-76=nbhavers user-77=david user-78=attlebor user-79=lucy user-80=onlycont user-81=branko user-82=outdoorc user-83=hodgsonmail user-84=ranxterc user-85=romaldki user-86=nove user-87=boldover user-88=sosevalu user-89=crrtipdl user-90=bakery user-91=what user-92=oubpgvbx user-93=tstardom user-94=nvihkvu user-95=sketchy user-96=cath user-97=havantho user-98=kategilpin user-99=ladburyp user-100=dancinggardener user-101=stagingerris user-102=design
Sep 24 01:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=sibtoncc user-104=asandcoc user-105=zebrapho user-106=bwppodcast user-107=steve user-108=burydropin user-109=fawcettd user-110=nsceres user-111=eatspam user-112=darkstar user-113=beauty user-114=dhyana user-115=fortunaz user-116=health2045 user-117=leftie user-118=foods user-119=nscdp user-120=philmcph user-121=ctedorgu user-122=donnychicago user-123=steakbridieme user-124=firstre5 user-125=lkpier user-126=isleofwi user-127=smrszyqg user-128=tigerlet user-129=barbersh user-130=hidden user-131=nomistakes user-132=ninejimm user-133=reliable user-134=cambria1 user-135=cathski user-136=pugwash user-137=paulmca1 user-138=howardon user-139=cwsocial user-140=hirefootballgame user-141=courseme user-142=eugincou feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 24 01:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 01:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:18 nativespace-cdp sudo[1513685]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:18 nativespace-cdp sudo[1513689]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZLHPgVTJWtDDaKHR.~
Sep 24 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:18 nativespace-cdp sudo[1513692]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZLHPgVTJWtDDaKHR.~'
Sep 24 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:18 nativespace-cdp sudo[1513695]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZLHPgVTJWtDDaKHR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:18 nativespace-cdp sudo[1513699]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:18 nativespace-cdp sudo[1513702]: pam_unix(sudo:session): session closed for user root
Sep 24 01:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 01:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 01:09:19 nativespace-cdp sudo[1513722]: pam_unix(sudo:session): session closed for user root
Sep 24 01:11:33 nativespace-cdp sshd[1514244]: Connection closed by 159.100.136.21 port 60626 [preauth]
Sep 24 01:16:34 nativespace-cdp sshd[1515515]: Connection closed by 159.100.136.21 port 41404 [preauth]
Sep 24 01:21:33 nativespace-cdp sshd[1516537]: Connection closed by 159.100.136.21 port 50278 [preauth]
Sep 24 01:26:33 nativespace-cdp sshd[1517507]: Connection closed by 159.100.136.21 port 59350 [preauth]
Sep 24 01:31:33 nativespace-cdp sshd[1518655]: Connection closed by 159.100.136.21 port 40534 [preauth]
Sep 24 01:32:47 nativespace-cdp sshd[1518841]: Invalid user ionguest from 171.22.31.23 port 48640
Sep 24 01:32:47 nativespace-cdp sshd[1518841]: input_userauth_request: invalid user ionguest [preauth]
Sep 24 01:32:47 nativespace-cdp sshd[1518841]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 01:32:47 nativespace-cdp sshd[1518841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.23
Sep 24 01:32:49 nativespace-cdp sshd[1518841]: Failed password for invalid user ionguest from 171.22.31.23 port 48640 ssh2
Sep 24 01:32:51 nativespace-cdp sshd[1518841]: Received disconnect from 171.22.31.23 port 48640:11: Bye Bye [preauth]
Sep 24 01:32:51 nativespace-cdp sshd[1518841]: Disconnected from 171.22.31.23 port 48640 [preauth]
Sep 24 01:32:56 nativespace-cdp sshd[1518857]: Invalid user ionadmin from 223.197.125.110 port 51888
Sep 24 01:32:56 nativespace-cdp sshd[1518857]: input_userauth_request: invalid user ionadmin [preauth]
Sep 24 01:32:56 nativespace-cdp sshd[1518857]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 01:32:56 nativespace-cdp sshd[1518857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.125.110
Sep 24 01:32:58 nativespace-cdp sshd[1518857]: Failed password for invalid user ionadmin from 223.197.125.110 port 51888 ssh2
Sep 24 01:33:06 nativespace-cdp sshd[1518857]: Received disconnect from 223.197.125.110 port 51888:11: Bye Bye [preauth]
Sep 24 01:33:06 nativespace-cdp sshd[1518857]: Disconnected from 223.197.125.110 port 51888 [preauth]
Sep 24 01:36:33 nativespace-cdp sshd[1519778]: Connection closed by 159.100.136.21 port 49522 [preauth]
Sep 24 01:36:43 nativespace-cdp sshd[1519795]: Invalid user elastic from 198.46.207.98 port 47102
Sep 24 01:36:43 nativespace-cdp sshd[1519795]: input_userauth_request: invalid user elastic [preauth]
Sep 24 01:36:43 nativespace-cdp sshd[1519795]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 01:36:43 nativespace-cdp sshd[1519795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.207.98
Sep 24 01:36:45 nativespace-cdp sshd[1519795]: Failed password for invalid user elastic from 198.46.207.98 port 47102 ssh2
Sep 24 01:36:45 nativespace-cdp sshd[1519795]: Received disconnect from 198.46.207.98 port 47102:11: Bye Bye [preauth]
Sep 24 01:36:45 nativespace-cdp sshd[1519795]: Disconnected from 198.46.207.98 port 47102 [preauth]
Sep 24 01:37:35 nativespace-cdp sshd[1519946]: Invalid user jenkins from 171.22.31.23 port 33612
Sep 24 01:37:35 nativespace-cdp sshd[1519946]: input_userauth_request: invalid user jenkins [preauth]
Sep 24 01:37:35 nativespace-cdp sshd[1519946]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 01:37:35 nativespace-cdp sshd[1519946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.23
Sep 24 01:37:37 nativespace-cdp sshd[1519946]: Failed password for invalid user jenkins from 171.22.31.23 port 33612 ssh2
Sep 24 01:37:37 nativespace-cdp sshd[1519946]: Received disconnect from 171.22.31.23 port 33612:11: Bye Bye [preauth]
Sep 24 01:37:37 nativespace-cdp sshd[1519946]: Disconnected from 171.22.31.23 port 33612 [preauth]
Sep 24 01:37:47 nativespace-cdp sshd[1519990]: Invalid user postgres from 198.46.207.98 port 47230
Sep 24 01:37:47 nativespace-cdp sshd[1519990]: input_userauth_request: invalid user postgres [preauth]
Sep 24 01:37:47 nativespace-cdp sshd[1519990]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 01:37:47 nativespace-cdp sshd[1519990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.207.98
Sep 24 01:37:49 nativespace-cdp sshd[1519994]: Invalid user steam from 223.197.125.110 port 51754
Sep 24 01:37:49 nativespace-cdp sshd[1519994]: input_userauth_request: invalid user steam [preauth]
Sep 24 01:37:49 nativespace-cdp sshd[1519994]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 01:37:49 nativespace-cdp sshd[1519994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.125.110
Sep 24 01:37:49 nativespace-cdp sshd[1519990]: Failed password for invalid user postgres from 198.46.207.98 port 47230 ssh2
Sep 24 01:37:49 nativespace-cdp sshd[1519990]: Received disconnect from 198.46.207.98 port 47230:11: Bye Bye [preauth]
Sep 24 01:37:49 nativespace-cdp sshd[1519990]: Disconnected from 198.46.207.98 port 47230 [preauth]
Sep 24 01:37:51 nativespace-cdp sshd[1519994]: Failed password for invalid user steam from 223.197.125.110 port 51754 ssh2
Sep 24 01:37:51 nativespace-cdp sshd[1519994]: Received disconnect from 223.197.125.110 port 51754:11: Bye Bye [preauth]
Sep 24 01:37:51 nativespace-cdp sshd[1519994]: Disconnected from 223.197.125.110 port 51754 [preauth]
Sep 24 01:38:12 nativespace-cdp sshd[1520078]: Invalid user oracle from 171.22.31.23 port 58500
Sep 24 01:38:12 nativespace-cdp sshd[1520078]: input_userauth_request: invalid user oracle [preauth]
Sep 24 01:38:12 nativespace-cdp sshd[1520078]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 01:38:12 nativespace-cdp sshd[1520078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.23
Sep 24 01:38:14 nativespace-cdp sshd[1520078]: Failed password for invalid user oracle from 171.22.31.23 port 58500 ssh2
Sep 24 01:38:14 nativespace-cdp sshd[1520078]: Received disconnect from 171.22.31.23 port 58500:11: Bye Bye [preauth]
Sep 24 01:38:14 nativespace-cdp sshd[1520078]: Disconnected from 171.22.31.23 port 58500 [preauth]
Sep 24 01:38:26 nativespace-cdp sshd[1520132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.207.98  user=root
Sep 24 01:38:26 nativespace-cdp sshd[1520132]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 01:38:27 nativespace-cdp sshd[1520132]: Failed password for root from 198.46.207.98 port 57192 ssh2
Sep 24 01:38:28 nativespace-cdp sshd[1520132]: Received disconnect from 198.46.207.98 port 57192:11: Bye Bye [preauth]
Sep 24 01:38:28 nativespace-cdp sshd[1520132]: Disconnected from 198.46.207.98 port 57192 [preauth]
Sep 24 01:38:37 nativespace-cdp sshd[1520183]: Invalid user server from 223.197.125.110 port 38444
Sep 24 01:38:37 nativespace-cdp sshd[1520183]: input_userauth_request: invalid user server [preauth]
Sep 24 01:38:37 nativespace-cdp sshd[1520183]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 01:38:37 nativespace-cdp sshd[1520183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.125.110
Sep 24 01:38:39 nativespace-cdp sshd[1520183]: Failed password for invalid user server from 223.197.125.110 port 38444 ssh2
Sep 24 01:38:40 nativespace-cdp sshd[1520183]: Received disconnect from 223.197.125.110 port 38444:11: Bye Bye [preauth]
Sep 24 01:38:40 nativespace-cdp sshd[1520183]: Disconnected from 223.197.125.110 port 38444 [preauth]
Sep 24 01:41:34 nativespace-cdp sshd[1520926]: Connection closed by 159.100.136.21 port 58656 [preauth]
Sep 24 01:46:35 nativespace-cdp sshd[1522195]: Connection closed by 159.100.136.21 port 40082 [preauth]
Sep 24 01:51:33 nativespace-cdp sshd[1523264]: Connection closed by 159.100.136.21 port 49530 [preauth]
Sep 24 01:56:33 nativespace-cdp sshd[1524214]: Connection closed by 159.100.136.21 port 59138 [preauth]
Sep 24 02:01:34 nativespace-cdp sshd[1525538]: Connection closed by 159.100.136.21 port 39780 [preauth]
Sep 24 02:06:33 nativespace-cdp sshd[1526457]: Connection closed by 159.100.136.21 port 49352 [preauth]
Sep 24 02:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 02:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:14 nativespace-cdp sudo[1526963]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 02:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:14 nativespace-cdp sudo[1526966]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 02:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:15 nativespace-cdp sudo[1526969]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 02:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:15 nativespace-cdp sudo[1526978]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 02:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:16 nativespace-cdp sudo[1526981]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 02:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:16 nativespace-cdp sudo[1526989]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 02:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:16 nativespace-cdp sudo[1526992]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 02:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:16 nativespace-cdp sudo[1526995]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 02:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:16 nativespace-cdp sudo[1526999]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 02:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:16 nativespace-cdp sudo[1527003]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 02:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:16 nativespace-cdp sudo[1527007]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 02:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:21 nativespace-cdp sudo[1527022]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 02:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:21 nativespace-cdp sudo[1527026]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=asandcoc user-2=sibtoncc user-3=zebrapho user-4=bwppodcast user-5=steve user-6=fawcettd user-7=burydropin user-8=nsceres user-9=darkstar user-10=eatspam user-11=beauty user-12=dhyana user-13=leftie user-14=foods user-15=fortunaz user-16=health2045 user-17=nscdp user-18=steakbridieme user-19=donnychicago user-20=firstre5 user-21=ctedorgu user-22=philmcph user-23=lkpier user-24=smrszyqg user-25=isleofwi user-26=barbersh user-27=tigerlet user-28=nomistakes user-29=hidden user-30=ninejimm user-31=reliable user-32=cathski user-33=cambria1 user-34=cwsocial user-35=paulmca1 user-36=pugwash user-37=howardon user-38=hirefootballgame user-39=courseme user-40=eugincou user-41=tomandle user-42=jennimil user-43=mcdermos user-44=chrisdal user-45=david user-46=careers user-47=nbhavers user-48=lucy
Sep 24 02:09:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=attlebor user-50=onlycont user-51=branko user-52=hodgsonmail user-53=ranxterc user-54=outdoorc user-55=romaldki user-56=nove user-57=boldover user-58=crrtipdl user-59=sosevalu user-60=bakery user-61=what user-62=oubpgvbx user-63=tstardom user-64=nvihkvu user-65=havantho user-66=cath user-67=sketchy user-68=kategilpin user-69=stagingerris user-70=dancinggardener user-71=ladburyp user-72=design user-73=booff user-74=markward user-75=foundation user-76=lbscrmod user-77=maflemin user-78=vantagep user-79=connect9 user-80=athenare user-81=ulsukarm user-82=jarvisin user-83=theblack user-84=hodgesonweb user-85=spectrum user-86=agproduc user-87=still user-88=leereyn1 user-89=stephani user-90=brmrjxl user-91=lakesan1 user-92=atestord user-93=sarafoundation user-94=strathar user-95=wilsonsw user-96=megacards user-97=musorguk user-98=martsblo user-99=ptkxhsbt user-100=dickemery123 user-101=hhdugcor user-102=lbhyisi
Sep 24 02:09:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=magichat user-104=firstres user-105=ultbcrra user-106=seftvta user-107=jonhartl user-108=opaiscyx user-109=coursemc user-110=costestimatorco user-111=clarkass user-112=firstrel user-113=highlegh user-114=southlon user-115=firstred user-116=elecleis user-117=milloyco user-118=gilpin user-119=fetch user-120=carsinyo user-121=hubmaster user-122=ianrayne user-123=accooper user-124=thqkgnbz user-125=connectedshoppin user-126=nstriton user-127=brighto1 user-128=oneoarco user-129=battlere user-130=vivienn1 user-131=firstre2 user-132=bedfords user-133=bemadonn user-134=newstoda user-135=ggaaorgu user-136=belle user-137=alexadmin user-138=skyfirec user-139=stuartge user-140=askhform user-141=innovat1 user-142=nativene feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 24 02:09:21 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 02:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:22 nativespace-cdp sudo[1527031]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:22 nativespace-cdp sudo[1527042]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qyiUQYQ2shpTzM1r.~
Sep 24 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:22 nativespace-cdp sudo[1527045]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qyiUQYQ2shpTzM1r.~'
Sep 24 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:22 nativespace-cdp sudo[1527048]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qyiUQYQ2shpTzM1r.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:22 nativespace-cdp sudo[1527052]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:22 nativespace-cdp sudo[1527055]: pam_unix(sudo:session): session closed for user root
Sep 24 02:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 02:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:09:23 nativespace-cdp sudo[1527076]: pam_unix(sudo:session): session closed for user root
Sep 24 02:11:33 nativespace-cdp sshd[1527684]: Connection closed by 159.100.136.21 port 58814 [preauth]
Sep 24 02:16:33 nativespace-cdp sshd[1529050]: Connection closed by 159.100.136.21 port 39602 [preauth]
Sep 24 02:21:34 nativespace-cdp sshd[1530096]: Connection closed by 159.100.136.21 port 48632 [preauth]
Sep 24 02:26:33 nativespace-cdp sshd[1531188]: Connection closed by 159.100.136.21 port 58030 [preauth]
Sep 24 02:31:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 02:31:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 02:31:02 nativespace-cdp sudo[1532399]: pam_unix(sudo:session): session closed for user root
Sep 24 02:31:36 nativespace-cdp sshd[1532540]: Connection closed by 159.100.136.21 port 39040 [preauth]
Sep 24 02:36:36 nativespace-cdp sshd[1533798]: Connection closed by 159.100.136.21 port 47732 [preauth]
Sep 24 02:41:33 nativespace-cdp sshd[1534791]: Connection closed by 159.100.136.21 port 57002 [preauth]
Sep 24 02:46:33 nativespace-cdp sshd[1536086]: Connection closed by 159.100.136.21 port 38260 [preauth]
Sep 24 02:51:36 nativespace-cdp sshd[1537182]: Connection closed by 159.100.136.21 port 46756 [preauth]
Sep 24 02:56:33 nativespace-cdp sshd[1538185]: Connection closed by 159.100.136.21 port 55884 [preauth]
Sep 24 03:01:33 nativespace-cdp sshd[1539364]: Connection closed by 159.100.136.21 port 37222 [preauth]
Sep 24 03:06:33 nativespace-cdp sshd[1540378]: Connection closed by 159.100.136.21 port 47024 [preauth]
Sep 24 03:09:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 03:09:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:11 nativespace-cdp sudo[1540951]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 03:09:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:11 nativespace-cdp sudo[1540954]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 03:09:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:12 nativespace-cdp sudo[1540957]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 03:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:12 nativespace-cdp sudo[1540962]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 03:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:14 nativespace-cdp sudo[1540965]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 03:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:15 nativespace-cdp sudo[1540977]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 03:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:15 nativespace-cdp sudo[1540981]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 03:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:15 nativespace-cdp sudo[1540984]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 03:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:15 nativespace-cdp sudo[1540987]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 03:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:15 nativespace-cdp sudo[1540990]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 03:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:15 nativespace-cdp sudo[1540993]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 03:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:16 nativespace-cdp sudo[1541009]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 03:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:17 nativespace-cdp sudo[1541014]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=magichat user-2=lbhyisi user-3=hhdugcor user-4=dickemery123 user-5=ptkxhsbt user-6=martsblo user-7=musorguk user-8=megacards user-9=wilsonsw user-10=strathar user-11=sarafoundation user-12=atestord user-13=brmrjxl user-14=lakesan1 user-15=stephani user-16=leereyn1 user-17=still user-18=agproduc user-19=spectrum user-20=theblack user-21=hodgesonweb user-22=jarvisin user-23=ulsukarm user-24=connect9 user-25=athenare user-26=vantagep user-27=maflemin user-28=lbscrmod user-29=foundation user-30=booff user-31=markward user-32=nativene user-33=innovat1 user-34=stuartge user-35=askhform user-36=alexadmin user-37=skyfirec user-38=belle user-39=ggaaorgu user-40=newstoda user-41=bemadonn user-42=bedfords user-43=firstre2 user-44=vivienn1 user-45=battlere user-46=oneoarco user-47=brighto1 user-48=nstriton
Sep 24 03:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=connectedshoppin user-50=thqkgnbz user-51=accooper user-52=ianrayne user-53=hubmaster user-54=carsinyo user-55=fetch user-56=milloyco user-57=gilpin user-58=elecleis user-59=firstred user-60=southlon user-61=highlegh user-62=firstrel user-63=clarkass user-64=costestimatorco user-65=coursemc user-66=opaiscyx user-67=jonhartl user-68=seftvta user-69=ultbcrra user-70=firstres user-71=eugincou user-72=courseme user-73=hirefootballgame user-74=paulmca1 user-75=howardon user-76=pugwash user-77=cwsocial user-78=cambria1 user-79=cathski user-80=ninejimm user-81=reliable user-82=hidden user-83=nomistakes user-84=barbersh user-85=tigerlet user-86=smrszyqg user-87=isleofwi user-88=lkpier user-89=philmcph user-90=ctedorgu user-91=steakbridieme user-92=donnychicago user-93=firstre5 user-94=nscdp user-95=fortunaz user-96=health2045 user-97=leftie user-98=foods user-99=dhyana user-100=beauty user-101=eatspam
Sep 24 03:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=darkstar user-103=nsceres user-104=burydropin user-105=fawcettd user-106=steve user-107=bwppodcast user-108=zebrapho user-109=sibtoncc user-110=asandcoc user-111=design user-112=ladburyp user-113=stagingerris user-114=dancinggardener user-115=kategilpin user-116=cath user-117=sketchy user-118=havantho user-119=nvihkvu user-120=oubpgvbx user-121=tstardom user-122=what user-123=bakery user-124=sosevalu user-125=crrtipdl user-126=boldover user-127=nove user-128=romaldki user-129=outdoorc user-130=hodgsonmail user-131=ranxterc user-132=branko user-133=onlycont user-134=attlebor user-135=lucy user-136=nbhavers user-137=careers user-138=david user-139=chrisdal user-140=mcdermos user-141=jennimil user-142=tomandle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 24 03:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 03:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:18 nativespace-cdp sudo[1541020]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 03:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:18 nativespace-cdp sudo[1541029]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-h0Nwf45pQGqyWZXe.~
Sep 24 03:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:18 nativespace-cdp sudo[1541032]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-h0Nwf45pQGqyWZXe.~'
Sep 24 03:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:18 nativespace-cdp sudo[1541035]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-h0Nwf45pQGqyWZXe.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 03:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:18 nativespace-cdp sudo[1541039]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 03:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:18 nativespace-cdp sudo[1541043]: pam_unix(sudo:session): session closed for user root
Sep 24 03:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 03:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 03:09:25 nativespace-cdp sudo[1541072]: pam_unix(sudo:session): session closed for user root
Sep 24 03:11:33 nativespace-cdp sshd[1541698]: Connection closed by 159.100.136.21 port 56134 [preauth]
Sep 24 03:16:33 nativespace-cdp sshd[1542941]: Connection closed by 159.100.136.21 port 37450 [preauth]
Sep 24 03:21:33 nativespace-cdp sshd[1543962]: Connection closed by 159.100.136.21 port 46902 [preauth]
Sep 24 03:24:05 nativespace-cdp sshd[1544391]: Invalid user superman from 96.78.175.36 port 33050
Sep 24 03:24:05 nativespace-cdp sshd[1544391]: input_userauth_request: invalid user superman [preauth]
Sep 24 03:24:05 nativespace-cdp sshd[1544391]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 03:24:05 nativespace-cdp sshd[1544391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.78.175.36
Sep 24 03:24:07 nativespace-cdp sshd[1544391]: Failed password for invalid user superman from 96.78.175.36 port 33050 ssh2
Sep 24 03:24:07 nativespace-cdp sshd[1544391]: Received disconnect from 96.78.175.36 port 33050:11: Bye Bye [preauth]
Sep 24 03:24:07 nativespace-cdp sshd[1544391]: Disconnected from 96.78.175.36 port 33050 [preauth]
Sep 24 03:24:30 nativespace-cdp sshd[1544443]: Invalid user tg from 89.183.192.106 port 31863
Sep 24 03:24:30 nativespace-cdp sshd[1544443]: input_userauth_request: invalid user tg [preauth]
Sep 24 03:24:30 nativespace-cdp sshd[1544443]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 03:24:30 nativespace-cdp sshd[1544443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.183.192.106
Sep 24 03:24:31 nativespace-cdp sshd[1544443]: Failed password for invalid user tg from 89.183.192.106 port 31863 ssh2
Sep 24 03:24:31 nativespace-cdp sshd[1544443]: Received disconnect from 89.183.192.106 port 31863:11: Bye Bye [preauth]
Sep 24 03:24:31 nativespace-cdp sshd[1544443]: Disconnected from 89.183.192.106 port 31863 [preauth]
Sep 24 03:26:33 nativespace-cdp sshd[1544989]: Connection closed by 159.100.136.21 port 56510 [preauth]
Sep 24 03:29:15 nativespace-cdp sshd[1545655]: Invalid user sopuser from 201.71.21.1 port 33222
Sep 24 03:29:15 nativespace-cdp sshd[1545655]: input_userauth_request: invalid user sopuser [preauth]
Sep 24 03:29:15 nativespace-cdp sshd[1545655]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 03:29:15 nativespace-cdp sshd[1545655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.71.21.1
Sep 24 03:29:17 nativespace-cdp sshd[1545655]: Failed password for invalid user sopuser from 201.71.21.1 port 33222 ssh2
Sep 24 03:29:21 nativespace-cdp sshd[1545655]: Received disconnect from 201.71.21.1 port 33222:11: Bye Bye [preauth]
Sep 24 03:29:21 nativespace-cdp sshd[1545655]: Disconnected from 201.71.21.1 port 33222 [preauth]
Sep 24 03:29:59 nativespace-cdp sshd[1545757]: Invalid user ts3 from 96.78.175.36 port 51918
Sep 24 03:29:59 nativespace-cdp sshd[1545757]: input_userauth_request: invalid user ts3 [preauth]
Sep 24 03:29:59 nativespace-cdp sshd[1545757]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 03:29:59 nativespace-cdp sshd[1545757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.78.175.36
Sep 24 03:30:02 nativespace-cdp sshd[1545757]: Failed password for invalid user ts3 from 96.78.175.36 port 51918 ssh2
Sep 24 03:30:02 nativespace-cdp sshd[1545757]: Received disconnect from 96.78.175.36 port 51918:11: Bye Bye [preauth]
Sep 24 03:30:02 nativespace-cdp sshd[1545757]: Disconnected from 96.78.175.36 port 51918 [preauth]
Sep 24 03:30:25 nativespace-cdp sshd[1546070]: Invalid user test from 89.183.192.106 port 64610
Sep 24 03:30:25 nativespace-cdp sshd[1546070]: input_userauth_request: invalid user test [preauth]
Sep 24 03:30:25 nativespace-cdp sshd[1546070]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 03:30:25 nativespace-cdp sshd[1546070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.183.192.106
Sep 24 03:30:27 nativespace-cdp sshd[1546070]: Failed password for invalid user test from 89.183.192.106 port 64610 ssh2
Sep 24 03:30:27 nativespace-cdp sshd[1546070]: Received disconnect from 89.183.192.106 port 64610:11: Bye Bye [preauth]
Sep 24 03:30:27 nativespace-cdp sshd[1546070]: Disconnected from 89.183.192.106 port 64610 [preauth]
Sep 24 03:30:42 nativespace-cdp sshd[1546114]: Invalid user ubuntu from 96.78.175.36 port 50528
Sep 24 03:30:42 nativespace-cdp sshd[1546114]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 03:30:42 nativespace-cdp sshd[1546114]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 03:30:42 nativespace-cdp sshd[1546114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.78.175.36
Sep 24 03:30:44 nativespace-cdp sshd[1546114]: Failed password for invalid user ubuntu from 96.78.175.36 port 50528 ssh2
Sep 24 03:30:44 nativespace-cdp sshd[1546114]: Received disconnect from 96.78.175.36 port 50528:11: Bye Bye [preauth]
Sep 24 03:30:44 nativespace-cdp sshd[1546114]: Disconnected from 96.78.175.36 port 50528 [preauth]
Sep 24 03:30:47 nativespace-cdp sshd[1546125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.71.21.1  user=root
Sep 24 03:30:47 nativespace-cdp sshd[1546125]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 03:30:49 nativespace-cdp sshd[1546125]: Failed password for root from 201.71.21.1 port 55214 ssh2
Sep 24 03:30:49 nativespace-cdp sshd[1546125]: Received disconnect from 201.71.21.1 port 55214:11: Bye Bye [preauth]
Sep 24 03:30:49 nativespace-cdp sshd[1546125]: Disconnected from 201.71.21.1 port 55214 [preauth]
Sep 24 03:31:14 nativespace-cdp sshd[1546277]: Invalid user sopuser from 89.183.192.106 port 30068
Sep 24 03:31:14 nativespace-cdp sshd[1546277]: input_userauth_request: invalid user sopuser [preauth]
Sep 24 03:31:14 nativespace-cdp sshd[1546277]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 03:31:14 nativespace-cdp sshd[1546277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.183.192.106
Sep 24 03:31:16 nativespace-cdp sshd[1546277]: Failed password for invalid user sopuser from 89.183.192.106 port 30068 ssh2
Sep 24 03:31:16 nativespace-cdp sshd[1546277]: Received disconnect from 89.183.192.106 port 30068:11: Bye Bye [preauth]
Sep 24 03:31:16 nativespace-cdp sshd[1546277]: Disconnected from 89.183.192.106 port 30068 [preauth]
Sep 24 03:31:33 nativespace-cdp sshd[1546344]: Connection closed by 159.100.136.21 port 37692 [preauth]
Sep 24 03:31:41 nativespace-cdp sshd[1546365]: Connection closed by 201.71.21.1 port 42592 [preauth]
Sep 24 03:32:25 nativespace-cdp sshd[1546503]: Invalid user tomcat from 201.71.21.1 port 58152
Sep 24 03:32:25 nativespace-cdp sshd[1546503]: input_userauth_request: invalid user tomcat [preauth]
Sep 24 03:32:25 nativespace-cdp sshd[1546503]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 03:32:25 nativespace-cdp sshd[1546503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.71.21.1
Sep 24 03:32:27 nativespace-cdp sshd[1546503]: Failed password for invalid user tomcat from 201.71.21.1 port 58152 ssh2
Sep 24 03:32:27 nativespace-cdp sshd[1546503]: Received disconnect from 201.71.21.1 port 58152:11: Bye Bye [preauth]
Sep 24 03:32:27 nativespace-cdp sshd[1546503]: Disconnected from 201.71.21.1 port 58152 [preauth]
Sep 24 03:36:33 nativespace-cdp sshd[1547496]: Connection closed by 159.100.136.21 port 47458 [preauth]
Sep 24 03:37:55 nativespace-cdp sshd[1547853]: Bad protocol version identification '\026\003\001' from 206.168.34.216 port 51582
Sep 24 03:37:58 nativespace-cdp sshd[1547855]: Did not receive identification string from 206.168.34.216 port 51590
Sep 24 03:38:19 nativespace-cdp sshd[1547893]: Connection closed by 206.168.34.216 port 44370 [preauth]
Sep 24 03:41:33 nativespace-cdp sshd[1548753]: Connection closed by 159.100.136.21 port 56868 [preauth]
Sep 24 03:46:35 nativespace-cdp sshd[1550017]: Connection closed by 159.100.136.21 port 37802 [preauth]
Sep 24 03:51:33 nativespace-cdp sshd[1551029]: Connection closed by 159.100.136.21 port 46948 [preauth]
Sep 24 03:56:34 nativespace-cdp sshd[1552037]: Connection closed by 159.100.136.21 port 56638 [preauth]
Sep 24 04:01:33 nativespace-cdp sshd[1553406]: Connection closed by 159.100.136.21 port 37254 [preauth]
Sep 24 04:06:33 nativespace-cdp sshd[1554618]: Connection closed by 159.100.136.21 port 46560 [preauth]
Sep 24 04:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 04:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:09 nativespace-cdp sudo[1555087]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 04:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:10 nativespace-cdp sudo[1555090]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 04:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:10 nativespace-cdp sudo[1555093]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 04:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:10 nativespace-cdp sudo[1555098]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 04:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:13 nativespace-cdp sudo[1555101]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 04:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:13 nativespace-cdp sudo[1555116]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 04:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:13 nativespace-cdp sudo[1555119]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 04:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:13 nativespace-cdp sudo[1555122]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 04:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:13 nativespace-cdp sudo[1555125]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 04:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:13 nativespace-cdp sudo[1555128]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 04:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:13 nativespace-cdp sudo[1555131]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 04:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:15 nativespace-cdp sudo[1555141]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 04:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:16 nativespace-cdp sudo[1555145]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bemadonn user-2=newstoda user-3=belle user-4=ggaaorgu user-5=bedfords user-6=oneoarco user-7=battlere user-8=vivienn1 user-9=firstre2 user-10=nstriton user-11=brighto1 user-12=nativene user-13=stuartge user-14=askhform user-15=innovat1 user-16=alexadmin user-17=skyfirec user-18=highlegh user-19=southlon user-20=firstred user-21=costestimatorco user-22=clarkass user-23=firstrel user-24=opaiscyx user-25=coursemc user-26=firstres user-27=ultbcrra user-28=jonhartl user-29=seftvta user-30=thqkgnbz user-31=connectedshoppin user-32=ianrayne user-33=accooper user-34=fetch user-35=carsinyo user-36=hubmaster user-37=elecleis user-38=milloyco user-39=gilpin user-40=megacards user-41=musorguk user-42=wilsonsw user-43=atestord user-44=sarafoundation user-45=strathar user-46=brmrjxl user-47=lakesan1
Sep 24 04:09:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=magichat user-49=hhdugcor user-50=lbhyisi user-51=ptkxhsbt user-52=dickemery123 user-53=martsblo user-54=ulsukarm user-55=lbscrmod user-56=maflemin user-57=vantagep user-58=connect9 user-59=athenare user-60=foundation user-61=booff user-62=markward user-63=leereyn1 user-64=stephani user-65=agproduc user-66=still user-67=theblack user-68=hodgesonweb user-69=spectrum user-70=jarvisin user-71=crrtipdl user-72=sosevalu user-73=bakery user-74=boldover user-75=nove user-76=design user-77=kategilpin user-78=dancinggardener user-79=stagingerris user-80=ladburyp user-81=nvihkvu user-82=havantho user-83=sketchy user-84=cath user-85=what user-86=oubpgvbx user-87=tstardom user-88=david user-89=careers user-90=nbhavers user-91=mcdermos user-92=chrisdal user-93=jennimil user-94=tomandle user-95=romaldki user-96=branko user-97=hodgsonmail user-98=outdoorc user-99=ranxterc user-100=onlycont user-101=lucy
Sep 24 04:09:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=attlebor user-103=tigerlet user-104=barbersh user-105=nomistakes user-106=hidden user-107=isleofwi user-108=smrszyqg user-109=steakbridieme user-110=donnychicago user-111=firstre5 user-112=ctedorgu user-113=philmcph user-114=lkpier user-115=leftie user-116=foods user-117=fortunaz user-118=health2045 user-119=nscdp user-120=courseme user-121=eugincou user-122=hirefootballgame user-123=cwsocial user-124=pugwash user-125=paulmca1 user-126=howardon user-127=ninejimm user-128=reliable user-129=cambria1 user-130=cathski user-131=steve user-132=zebrapho user-133=bwppodcast user-134=asandcoc user-135=sibtoncc user-136=dhyana user-137=darkstar user-138=eatspam user-139=beauty user-140=nsceres user-141=fawcettd user-142=burydropin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 24 04:09:16 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 04:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:16 nativespace-cdp sudo[1555150]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 04:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:17 nativespace-cdp sudo[1555157]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2pTlsyQ0oZRfDAyF.~
Sep 24 04:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:17 nativespace-cdp sudo[1555160]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2pTlsyQ0oZRfDAyF.~'
Sep 24 04:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:17 nativespace-cdp sudo[1555163]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2pTlsyQ0oZRfDAyF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 04:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:17 nativespace-cdp sudo[1555167]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 04:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:17 nativespace-cdp sudo[1555170]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 24 04:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:18 nativespace-cdp sudo[1555173]: pam_unix(sudo:session): session closed for user root
Sep 24 04:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 04:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:09:19 nativespace-cdp sudo[1555203]: pam_unix(sudo:session): session closed for user root
Sep 24 04:11:33 nativespace-cdp sshd[1555825]: Connection closed by 159.100.136.21 port 55732 [preauth]
Sep 24 04:16:33 nativespace-cdp sshd[1557197]: Connection closed by 159.100.136.21 port 36952 [preauth]
Sep 24 04:21:33 nativespace-cdp sshd[1558462]: Connection closed by 159.100.136.21 port 46280 [preauth]
Sep 24 04:26:34 nativespace-cdp sshd[1559594]: Connection closed by 159.100.136.21 port 55690 [preauth]
Sep 24 04:31:33 nativespace-cdp sshd[1561182]: Connection closed by 159.100.136.21 port 36596 [preauth]
Sep 24 04:36:33 nativespace-cdp sshd[1563274]: Connection closed by 159.100.136.21 port 45966 [preauth]
Sep 24 04:41:36 nativespace-cdp sshd[1565441]: Connection closed by 159.100.136.21 port 55054 [preauth]
Sep 24 04:46:34 nativespace-cdp sshd[1566782]: Connection closed by 159.100.136.21 port 36108 [preauth]
Sep 24 04:51:33 nativespace-cdp sshd[1567858]: Connection closed by 159.100.136.21 port 44770 [preauth]
Sep 24 04:56:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 04:56:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:13 nativespace-cdp sudo[1568840]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 04:56:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:13 nativespace-cdp sudo[1568847]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 04:56:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:17 nativespace-cdp sudo[1568862]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sosevalu user-2=crrtipdl user-3=bakery user-4=boldover user-5=nove user-6=design user-7=kategilpin user-8=ladburyp user-9=dancinggardener user-10=stagingerris user-11=nvihkvu user-12=cath user-13=sketchy user-14=havantho user-15=what user-16=tstardom user-17=oubpgvbx user-18=careers user-19=nbhavers user-20=david user-21=mcdermos user-22=chrisdal user-23=jennimil user-24=tomandle user-25=romaldki user-26=branko user-27=ranxterc user-28=outdoorc user-29=hodgsonmail user-30=onlycont user-31=attlebor user-32=lucy user-33=tigerlet user-34=barbersh user-35=hidden user-36=nomistakes user-37=smrszyqg user-38=isleofwi user-39=ctedorgu user-40=philmcph user-41=donnychicago user-42=steakbridieme user-43=firstre5 user-44=lkpier user-45=fortunaz user-46=health2045 user-47=leftie user-48=foods user-49=nscdp
Sep 24 04:56:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=courseme user-51=eugincou user-52=hirefootballgame user-53=howardon user-54=pugwash user-55=paulmca1 user-56=cwsocial user-57=ninejimm user-58=reliable user-59=cambria1 user-60=cathski user-61=steve user-62=zebrapho user-63=bwppodcast user-64=asandcoc user-65=sibtoncc user-66=dhyana user-67=eatspam user-68=darkstar user-69=beauty user-70=nsceres user-71=burydropin user-72=fawcettd user-73=bemadonn user-74=belle user-75=ggaaorgu user-76=newstoda user-77=bedfords user-78=battlere user-79=oneoarco user-80=firstre2 user-81=vivienn1 user-82=brighto1 user-83=nstriton user-84=nativene user-85=askhform user-86=stuartge user-87=innovat1 user-88=skyfirec user-89=alexadmin user-90=southlon user-91=highlegh user-92=firstred user-93=costestimatorco user-94=firstrel user-95=clarkass user-96=coursemc user-97=opaiscyx user-98=firstres user-99=seftvta user-100=jonhartl user-101=ultbcrra user-102=thqkgnbz
Sep 24 04:56:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=connectedshoppin user-104=ianrayne user-105=accooper user-106=carsinyo user-107=fetch user-108=hubmaster user-109=elecleis user-110=gilpin user-111=milloyco user-112=musorguk user-113=megacards user-114=wilsonsw user-115=sarafoundation user-116=atestord user-117=strathar user-118=brmrjxl user-119=lakesan1 user-120=magichat user-121=lbhyisi user-122=hhdugcor user-123=ptkxhsbt user-124=dickemery123 user-125=martsblo user-126=ulsukarm user-127=maflemin user-128=lbscrmod user-129=athenare user-130=connect9 user-131=vantagep user-132=foundation user-133=markward user-134=booff user-135=leereyn1 user-136=stephani user-137=still user-138=agproduc user-139=theblack user-140=hodgesonweb user-141=spectrum user-142=jarvisin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 24 04:56:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 04:56:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:18 nativespace-cdp sudo[1568866]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 24 04:56:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:20 nativespace-cdp sudo[1568872]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 24 04:56:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:20 nativespace-cdp sudo[1568876]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:33 nativespace-cdp sshd[1568917]: Connection closed by 159.100.136.21 port 54552 [preauth]
Sep 24 04:56:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 24 04:56:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 04:56:42 nativespace-cdp sudo[1568973]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 04:56:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 24 04:56:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:43 nativespace-cdp sudo[1568979]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 24 04:56:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:44 nativespace-cdp sudo[1568987]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 24 04:56:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:46 nativespace-cdp sudo[1568994]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 24 04:56:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:46 nativespace-cdp sudo[1569004]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 24 04:56:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:48 nativespace-cdp sudo[1569016]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 24 04:56:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:53 nativespace-cdp sudo[1569023]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 24 04:56:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:53 nativespace-cdp sudo[1569036]: pam_unix(sudo:session): session closed for user root
Sep 24 04:56:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 24 04:56:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:56:53 nativespace-cdp sudo[1569040]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 24 04:57:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:02 nativespace-cdp sudo[1569130]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 24 04:57:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 04:57:06 nativespace-cdp sudo[1569189]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 04:57:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 24 04:57:06 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 24 04:57:06 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 24 04:57:06 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:57:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 04:57:06 nativespace-cdp sudo[1569196]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 04:57:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 24 04:57:06 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 24 04:57:06 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 24 04:57:06 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:57:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 04:57:07 nativespace-cdp sudo[1569202]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 04:57:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 24 04:57:07 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 24 04:57:07 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 24 04:57:07 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:57:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 04:57:09 nativespace-cdp sudo[1569215]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 24 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 04:57:18 nativespace-cdp sudo[1569336]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 04:57:18 nativespace-cdp sudo[1569342]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 04:57:18 nativespace-cdp sudo[1569348]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 24 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 04:57:18 nativespace-cdp sudo[1569354]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 04:57:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 24 04:57:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:21 nativespace-cdp sudo[1569389]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 24 04:57:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:22 nativespace-cdp sudo[1569402]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 24 04:57:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 04:57:40 nativespace-cdp sudo[1569497]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 04:57:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 24 04:57:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:41 nativespace-cdp sudo[1569505]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 24 04:57:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:42 nativespace-cdp sudo[1569513]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 24 04:57:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:43 nativespace-cdp sudo[1569517]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 24 04:57:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:43 nativespace-cdp sudo[1569527]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 24 04:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:46 nativespace-cdp sudo[1569542]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 24 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:46 nativespace-cdp sudo[1569548]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 24 04:57:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:57:53 nativespace-cdp sudo[1569624]: pam_unix(sudo:session): session closed for user root
Sep 24 04:57:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 24 04:57:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 04:57:56 nativespace-cdp sudo[1569680]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 04:57:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 24 04:57:56 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 24 04:57:56 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 24 04:57:56 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:57:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 04:57:56 nativespace-cdp sudo[1569686]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 04:57:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 24 04:57:56 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 24 04:57:56 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 24 04:57:56 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:57:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 04:58:14 nativespace-cdp sudo[1569693]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 04:58:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 24 04:58:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 04:58:24 nativespace-cdp sudo[1569931]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 04:58:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 24 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 24 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 24 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:58:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 04:58:24 nativespace-cdp sudo[1569937]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 04:58:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 24 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 24 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 24 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:58:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 04:58:24 nativespace-cdp sudo[1569943]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 04:58:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 24 04:58:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:58:27 nativespace-cdp sudo[1569979]: pam_unix(sudo:session): session closed for user root
Sep 24 04:58:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 24 04:58:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:58:27 nativespace-cdp sudo[1569985]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 24 04:59:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 04:59:15 nativespace-cdp sudo[1570385]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 04:59:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 24 04:59:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:15 nativespace-cdp sudo[1570391]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 24 04:59:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:15 nativespace-cdp sudo[1570396]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 24 04:59:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:15 nativespace-cdp sudo[1570400]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 24 04:59:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:17 nativespace-cdp sudo[1570417]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 24 04:59:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:17 nativespace-cdp sudo[1570422]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 24 04:59:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:25 nativespace-cdp sudo[1570497]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 24 04:59:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 04:59:28 nativespace-cdp sudo[1570558]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 04:59:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 24 04:59:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 24 04:59:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 24 04:59:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:59:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 04:59:28 nativespace-cdp sudo[1570564]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 04:59:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 24 04:59:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 24 04:59:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 24 04:59:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:59:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 04:59:40 nativespace-cdp sudo[1570570]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 24 04:59:40 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 24 04:59:40 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 24 04:59:40 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 04:59:42 nativespace-cdp sudo[1570600]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 04:59:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 24 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 04:59:49 nativespace-cdp sudo[1570722]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 04:59:49 nativespace-cdp sudo[1570728]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 04:59:49 nativespace-cdp sudo[1570734]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 24 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 04:59:49 nativespace-cdp sudo[1570740]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 04:59:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 24 04:59:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:51 nativespace-cdp sudo[1570776]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 24 04:59:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:51 nativespace-cdp sudo[1570780]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 24 04:59:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:52 nativespace-cdp sudo[1570797]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 24 04:59:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:52 nativespace-cdp sudo[1570802]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 24 04:59:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 24 04:59:53 nativespace-cdp sudo[1570813]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 24 04:59:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 24 04:59:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:54 nativespace-cdp sudo[1570819]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 24 04:59:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:54 nativespace-cdp sudo[1570823]: pam_unix(sudo:session): session closed for user root
Sep 24 04:59:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 24 04:59:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 04:59:54 nativespace-cdp sudo[1570828]: pam_unix(sudo:session): session closed for user root
Sep 24 05:00:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 24 05:00:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 05:00:13 nativespace-cdp sudo[1571092]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 05:00:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 24 05:00:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:00:14 nativespace-cdp sudo[1571098]: pam_unix(sudo:session): session closed for user root
Sep 24 05:00:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 24 05:00:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:00:14 nativespace-cdp sudo[1571107]: pam_unix(sudo:session): session closed for user root
Sep 24 05:00:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 24 05:00:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:00:15 nativespace-cdp sudo[1571123]: pam_unix(sudo:session): session closed for user root
Sep 24 05:00:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 24 05:00:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:00:20 nativespace-cdp sudo[1571189]: pam_unix(sudo:session): session closed for user root
Sep 24 05:00:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 24 05:00:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 05:00:23 nativespace-cdp sudo[1571263]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 05:00:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 24 05:00:23 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 24 05:00:23 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 24 05:00:23 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 05:00:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 05:00:24 nativespace-cdp sudo[1571269]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 05:00:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 24 05:00:24 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 24 05:00:24 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 24 05:00:24 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 05:00:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 05:00:47 nativespace-cdp sudo[1571278]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 05:00:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 24 05:00:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 05:00:54 nativespace-cdp sudo[1571565]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 05:00:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 24 05:00:54 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 24 05:00:54 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 24 05:00:54 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 05:00:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 05:00:54 nativespace-cdp sudo[1571572]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 05:00:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 24 05:00:54 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 24 05:00:54 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 24 05:00:54 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 24 05:00:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 05:00:54 nativespace-cdp sudo[1571578]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 05:00:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 24 05:00:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:00:57 nativespace-cdp sudo[1571614]: pam_unix(sudo:session): session closed for user root
Sep 24 05:00:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 24 05:00:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:00:57 nativespace-cdp sudo[1571625]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 24 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 24 05:01:19 nativespace-cdp sudo[1571742]: pam_unix(sudo:session): session closed for user fortunaz
Sep 24 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 24 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:20 nativespace-cdp sudo[1571748]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 24 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:20 nativespace-cdp sudo[1571754]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 24 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:20 nativespace-cdp sudo[1571759]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 24 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:22 nativespace-cdp sudo[1571780]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 24 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:23 nativespace-cdp sudo[1571785]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 24 05:01:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:27 nativespace-cdp sudo[1571848]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:33 nativespace-cdp sshd[1571946]: Connection closed by 159.100.136.21 port 35690 [preauth]
Sep 24 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=sosevalu WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "Popup Maker" on ONE | OAR (https://oneoar.co.uk). Installed version: 1.17.1. Available version: 1.20.2.<br/><br/>2. Plugin "Site Kit by Google" on ONE | OAR (https://oneoar.co.uk). Installed version: 1.86.0. Available version: 1.136.0.<br/><br/>3. Plugin "Site Kit by Google" on Limekilns Heritage Trust (https://limekilnspier.org.uk). Installed version: 1.120.0. Available version: 1.136.0.<br/><br/>4. Plugin "Performance Lab" on Pinstripe Inventories (https://pinstripe.services). Installed version: 2.7.0. Available version: 3.4.1.<br/><br/>5. Plugin "Popup Maker" on Pinstripe Inventories (https://pinstripe.services). Installed version:
Sep 24 05:01:37 nativespace-cdp sudo: wp-toolkit : (command continued) 1.18.2. Available version: 1.20.2.<br/><br/>6. Plugin "Site Kit by Google" on Pinstripe Inventories (https://pinstripe.services). Installed version: 1.115.0. Available version: 1.136.0.<br/><br/>' installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 24 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:38 nativespace-cdp sudo[1572031]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 24 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:44 nativespace-cdp sudo[1572156]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 24 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:44 nativespace-cdp sudo[1572159]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 24 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:44 nativespace-cdp sudo[1572162]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 24 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:44 nativespace-cdp sudo[1572165]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 24 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:44 nativespace-cdp sudo[1572168]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 24 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:44 nativespace-cdp sudo[1572171]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572174]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572177]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572180]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572183]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572186]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572189]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572192]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572195]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572198]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572201]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572204]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572208]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572211]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572215]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572218]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572221]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572224]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572227]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572230]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572233]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572236]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572239]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572242]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572245]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572248]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572251]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572254]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572257]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572260]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572263]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572266]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572270]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:45 nativespace-cdp sudo[1572273]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572276]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572279]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572282]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572285]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572288]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572291]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572294]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572297]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572300]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572303]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572306]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572309]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572312]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572315]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572319]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572322]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572325]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572328]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572331]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572334]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572337]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572340]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572343]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572346]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572349]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572352]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572356]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572359]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572362]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572365]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572368]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572371]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572374]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:46 nativespace-cdp sudo[1572377]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572380]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572383]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572386]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572389]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572393]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572396]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572399]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572402]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572405]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572408]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572411]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572414]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572417]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572421]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572424]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572427]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572430]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572433]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572436]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572439]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572442]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572445]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572448]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572451]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572454]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572457]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572460]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572463]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:47 nativespace-cdp sudo[1572466]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572469]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572472]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572475]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572478]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572481]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572484]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572487]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572490]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572493]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572496]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572499]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572502]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572505]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572509]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572512]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572515]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572519]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572522]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572525]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572528]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572531]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572534]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572537]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572540]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572543]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572546]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572549]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572552]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572555]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572558]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572561]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572564]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572567]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572570]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572573]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572576]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572579]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:48 nativespace-cdp sudo[1572582]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572585]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572588]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572591]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572594]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572597]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572600]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572603]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572606]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572609]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572612]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572615]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572618]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572621]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572624]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572627]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572630]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572633]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572637]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572640]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572643]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572646]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572649]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572652]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572655]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572658]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572661]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572664]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572667]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572670]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572673]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572676]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572679]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572682]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572685]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572688]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572691]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:49 nativespace-cdp sudo[1572694]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572698]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572701]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572704]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572707]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572710]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572713]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572716]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572719]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572722]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572725]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572728]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572731]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572734]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572737]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572740]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572743]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572746]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572750]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572753]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572756]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572759]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572762]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572765]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572768]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572771]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572774]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572777]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572780]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572783]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572786]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572789]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572792]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572795]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572798]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572801]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572804]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572808]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:50 nativespace-cdp sudo[1572811]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572814]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572817]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572820]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572823]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572826]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572829]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572832]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572835]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572838]: pam_unix(sudo:session): session closed for user root
Sep 24 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 24 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:01:51 nativespace-cdp sudo[1572841]: pam_unix(sudo:session): session closed for user root
Sep 24 05:06:34 nativespace-cdp sshd[1573731]: Connection closed by 159.100.136.21 port 45318 [preauth]
Sep 24 05:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 05:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:10 nativespace-cdp sudo[1574155]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 05:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:10 nativespace-cdp sudo[1574158]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 05:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:10 nativespace-cdp sudo[1574161]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 05:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:10 nativespace-cdp sudo[1574165]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 05:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:12 nativespace-cdp sudo[1574168]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 05:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:12 nativespace-cdp sudo[1574179]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 05:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:12 nativespace-cdp sudo[1574182]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 05:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:12 nativespace-cdp sudo[1574186]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 05:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:12 nativespace-cdp sudo[1574189]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 05:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:12 nativespace-cdp sudo[1574192]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 05:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:12 nativespace-cdp sudo[1574195]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 05:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:14 nativespace-cdp sudo[1574205]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 05:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:14 nativespace-cdp sudo[1574210]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=branko user-2=hodgsonmail user-3=outdoorc user-4=ranxterc user-5=romaldki user-6=attlebor user-7=lucy user-8=onlycont user-9=mcdermos user-10=chrisdal user-11=nbhavers user-12=careers user-13=david user-14=tomandle user-15=jennimil user-16=kategilpin user-17=ladburyp user-18=stagingerris user-19=dancinggardener user-20=design user-21=what user-22=tstardom user-23=oubpgvbx user-24=nvihkvu user-25=sketchy user-26=cath user-27=havantho user-28=sosevalu user-29=crrtipdl user-30=bakery user-31=nove user-32=boldover user-33=eatspam user-34=darkstar user-35=beauty user-36=dhyana user-37=burydropin user-38=fawcettd user-39=nsceres user-40=zebrapho user-41=bwppodcast user-42=steve user-43=sibtoncc user-44=asandcoc user-45=hirefootballgame user-46=courseme user-47=eugincou user-48=reliable
Sep 24 05:09:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ninejimm user-50=cathski user-51=cambria1 user-52=paulmca1 user-53=howardon user-54=pugwash user-55=cwsocial user-56=smrszyqg user-57=isleofwi user-58=barbersh user-59=tigerlet user-60=hidden user-61=nomistakes user-62=health2045 user-63=fortunaz user-64=foods user-65=leftie user-66=nscdp user-67=philmcph user-68=ctedorgu user-69=donnychicago user-70=steakbridieme user-71=firstre5 user-72=lkpier user-73=ianrayne user-74=accooper user-75=thqkgnbz user-76=connectedshoppin user-77=elecleis user-78=gilpin user-79=milloyco user-80=carsinyo user-81=fetch user-82=hubmaster user-83=costestimatorco user-84=firstrel user-85=clarkass user-86=southlon user-87=highlegh user-88=firstred user-89=firstres user-90=seftvta user-91=jonhartl user-92=ultbcrra user-93=opaiscyx user-94=coursemc user-95=askhform user-96=stuartge user-97=innovat1 user-98=nativene user-99=skyfirec user-100=alexadmin user-101=bedfords
Sep 24 05:09:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bemadonn user-103=belle user-104=ggaaorgu user-105=newstoda user-106=brighto1 user-107=nstriton user-108=battlere user-109=oneoarco user-110=firstre2 user-111=vivienn1 user-112=still user-113=agproduc user-114=leereyn1 user-115=stephani user-116=jarvisin user-117=hodgesonweb user-118=theblack user-119=spectrum user-120=ulsukarm user-121=foundation user-122=markward user-123=booff user-124=maflemin user-125=lbscrmod user-126=connect9 user-127=athenare user-128=vantagep user-129=lbhyisi user-130=hhdugcor user-131=magichat user-132=martsblo user-133=ptkxhsbt user-134=dickemery123 user-135=wilsonsw user-136=musorguk user-137=megacards user-138=lakesan1 user-139=brmrjxl user-140=sarafoundation user-141=atestord user-142=strathar feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 24 05:09:14 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 05:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:15 nativespace-cdp sudo[1574216]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 05:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:15 nativespace-cdp sudo[1574221]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XrPpQ3reyeUdvoIg.~
Sep 24 05:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:15 nativespace-cdp sudo[1574224]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XrPpQ3reyeUdvoIg.~'
Sep 24 05:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:15 nativespace-cdp sudo[1574227]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XrPpQ3reyeUdvoIg.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 05:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:15 nativespace-cdp sudo[1574231]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 05:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:15 nativespace-cdp sudo[1574234]: pam_unix(sudo:session): session closed for user root
Sep 24 05:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 05:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 05:09:16 nativespace-cdp sudo[1574254]: pam_unix(sudo:session): session closed for user root
Sep 24 05:11:33 nativespace-cdp sshd[1574849]: Connection closed by 159.100.136.21 port 53628 [preauth]
Sep 24 05:16:35 nativespace-cdp sshd[1576134]: Connection closed by 159.100.136.21 port 34728 [preauth]
Sep 24 05:21:36 nativespace-cdp sshd[1577204]: Connection closed by 159.100.136.21 port 43852 [preauth]
Sep 24 05:26:35 nativespace-cdp sshd[1578222]: Connection closed by 159.100.136.21 port 53578 [preauth]
Sep 24 05:31:33 nativespace-cdp sshd[1579717]: Connection closed by 159.100.136.21 port 34502 [preauth]
Sep 24 05:35:09 nativespace-cdp su: pam_unix(su:session): session opened for user atestord by (uid=0)
Sep 24 05:35:09 nativespace-cdp su[1580462]: pam_unix(su:session): session closed for user atestord
Sep 24 05:36:33 nativespace-cdp sshd[1581107]: Connection closed by 159.100.136.21 port 43956 [preauth]
Sep 24 05:41:33 nativespace-cdp sshd[1582713]: Connection closed by 159.100.136.21 port 53304 [preauth]
Sep 24 05:46:36 nativespace-cdp sshd[1584062]: Connection closed by 159.100.136.21 port 33932 [preauth]
Sep 24 05:51:36 nativespace-cdp sshd[1585139]: Connection closed by 159.100.136.21 port 42228 [preauth]
Sep 24 05:56:33 nativespace-cdp sshd[1586160]: Connection closed by 159.100.136.21 port 51802 [preauth]
Sep 24 06:01:33 nativespace-cdp sshd[1587482]: Connection closed by 159.100.136.21 port 59986 [preauth]
Sep 24 06:06:33 nativespace-cdp sshd[1588436]: Connection closed by 159.100.136.21 port 40874 [preauth]
Sep 24 06:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 06:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:09 nativespace-cdp sudo[1588857]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 06:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:09 nativespace-cdp sudo[1588860]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 06:09:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:10 nativespace-cdp sudo[1588863]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 06:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:10 nativespace-cdp sudo[1588872]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 06:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:12 nativespace-cdp sudo[1588875]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:12 nativespace-cdp sudo[1588886]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:12 nativespace-cdp sudo[1588890]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:12 nativespace-cdp sudo[1588893]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:12 nativespace-cdp sudo[1588897]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:12 nativespace-cdp sudo[1588900]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:12 nativespace-cdp sudo[1588904]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 06:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:17 nativespace-cdp sudo[1588919]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 06:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:17 nativespace-cdp sudo[1588924]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sarafoundation user-2=atestord user-3=strathar user-4=brmrjxl user-5=lakesan1 user-6=musorguk user-7=megacards user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=lbhyisi user-14=hhdugcor user-15=maflemin user-16=lbscrmod user-17=connect9 user-18=athenare user-19=vantagep user-20=booff user-21=markward user-22=foundation user-23=ulsukarm user-24=hodgesonweb user-25=theblack user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=still user-31=agproduc user-32=battlere user-33=oneoarco user-34=firstre2 user-35=vivienn1 user-36=brighto1 user-37=nstriton user-38=bemadonn user-39=ggaaorgu user-40=belle user-41=newstoda user-42=bedfords user-43=skyfirec user-44=alexadmin user-45=nativene user-46=stuartge user-47=askhform user-48=innovat1
Sep 24 06:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=coursemc user-50=opaiscyx user-51=firstres user-52=jonhartl user-53=seftvta user-54=ultbcrra user-55=southlon user-56=highlegh user-57=firstred user-58=costestimatorco user-59=firstrel user-60=clarkass user-61=carsinyo user-62=fetch user-63=hubmaster user-64=elecleis user-65=milloyco user-66=gilpin user-67=thqkgnbz user-68=connectedshoppin user-69=ianrayne user-70=accooper user-71=ctedorgu user-72=philmcph user-73=donnychicago user-74=firstre5 user-75=steakbridieme user-76=lkpier user-77=health2045 user-78=fortunaz user-79=foods user-80=leftie user-81=nscdp user-82=barbersh user-83=tigerlet user-84=hidden user-85=nomistakes user-86=smrszyqg user-87=isleofwi user-88=howardon user-89=pugwash user-90=paulmca1 user-91=cwsocial user-92=reliable user-93=ninejimm user-94=cathski user-95=cambria1 user-96=courseme user-97=eugincou user-98=hirefootballgame user-99=sibtoncc user-100=asandcoc user-101=steve
Sep 24 06:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=bwppodcast user-104=nsceres user-105=burydropin user-106=fawcettd user-107=dhyana user-108=eatspam user-109=darkstar user-110=beauty user-111=boldover user-112=nove user-113=sosevalu user-114=crrtipdl user-115=bakery user-116=nvihkvu user-117=sketchy user-118=cath user-119=havantho user-120=what user-121=oubpgvbx user-122=tstardom user-123=design user-124=kategilpin user-125=ladburyp user-126=dancinggardener user-127=stagingerris user-128=jennimil user-129=tomandle user-130=nbhavers user-131=careers user-132=david user-133=mcdermos user-134=chrisdal user-135=onlycont user-136=attlebor user-137=lucy user-138=romaldki user-139=branko user-140=hodgsonmail user-141=ranxterc user-142=outdoorc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 24 06:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 06:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:18 nativespace-cdp sudo[1588930]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:18 nativespace-cdp sudo[1588937]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hluqCvM27uh7EhKF.~
Sep 24 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:18 nativespace-cdp sudo[1588940]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hluqCvM27uh7EhKF.~'
Sep 24 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:18 nativespace-cdp sudo[1588943]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hluqCvM27uh7EhKF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:18 nativespace-cdp sudo[1588947]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:18 nativespace-cdp sudo[1588950]: pam_unix(sudo:session): session closed for user root
Sep 24 06:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 06:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 06:09:20 nativespace-cdp sudo[1588969]: pam_unix(sudo:session): session closed for user root
Sep 24 06:11:36 nativespace-cdp sshd[1589571]: Connection closed by 159.100.136.21 port 50390 [preauth]
Sep 24 06:16:34 nativespace-cdp sshd[1590847]: Connection closed by 159.100.136.21 port 59370 [preauth]
Sep 24 06:21:33 nativespace-cdp sshd[1591925]: Connection closed by 159.100.136.21 port 40338 [preauth]
Sep 24 06:26:36 nativespace-cdp sshd[1592914]: Connection closed by 159.100.136.21 port 49738 [preauth]
Sep 24 06:26:40 nativespace-cdp sshd[1592902]: Received disconnect from 45.192.176.21 port 55058:11: Bye Bye [preauth]
Sep 24 06:26:40 nativespace-cdp sshd[1592902]: Disconnected from 45.192.176.21 port 55058 [preauth]
Sep 24 06:28:23 nativespace-cdp sshd[1593243]: Invalid user user from 181.94.237.129 port 58506
Sep 24 06:28:23 nativespace-cdp sshd[1593243]: input_userauth_request: invalid user user [preauth]
Sep 24 06:28:23 nativespace-cdp sshd[1593243]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 06:28:23 nativespace-cdp sshd[1593243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.94.237.129
Sep 24 06:28:25 nativespace-cdp sshd[1593243]: Failed password for invalid user user from 181.94.237.129 port 58506 ssh2
Sep 24 06:28:25 nativespace-cdp sshd[1593243]: Received disconnect from 181.94.237.129 port 58506:11: Bye Bye [preauth]
Sep 24 06:28:25 nativespace-cdp sshd[1593243]: Disconnected from 181.94.237.129 port 58506 [preauth]
Sep 24 06:30:44 nativespace-cdp sshd[1593852]: Invalid user ubuntu from 45.192.176.21 port 51374
Sep 24 06:30:44 nativespace-cdp sshd[1593852]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 06:30:44 nativespace-cdp sshd[1593852]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 06:30:44 nativespace-cdp sshd[1593852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.192.176.21
Sep 24 06:30:46 nativespace-cdp sshd[1593852]: Failed password for invalid user ubuntu from 45.192.176.21 port 51374 ssh2
Sep 24 06:30:47 nativespace-cdp sshd[1593852]: Received disconnect from 45.192.176.21 port 51374:11: Bye Bye [preauth]
Sep 24 06:30:47 nativespace-cdp sshd[1593852]: Disconnected from 45.192.176.21 port 51374 [preauth]
Sep 24 06:31:06 nativespace-cdp sshd[1594115]: Invalid user test from 181.94.237.129 port 59290
Sep 24 06:31:06 nativespace-cdp sshd[1594115]: input_userauth_request: invalid user test [preauth]
Sep 24 06:31:06 nativespace-cdp sshd[1594115]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 06:31:06 nativespace-cdp sshd[1594115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.94.237.129
Sep 24 06:31:08 nativespace-cdp sshd[1594115]: Failed password for invalid user test from 181.94.237.129 port 59290 ssh2
Sep 24 06:31:08 nativespace-cdp sshd[1594115]: Received disconnect from 181.94.237.129 port 59290:11: Bye Bye [preauth]
Sep 24 06:31:08 nativespace-cdp sshd[1594115]: Disconnected from 181.94.237.129 port 59290 [preauth]
Sep 24 06:31:28 nativespace-cdp sshd[1594251]: Invalid user thomas from 45.192.176.21 port 58876
Sep 24 06:31:28 nativespace-cdp sshd[1594251]: input_userauth_request: invalid user thomas [preauth]
Sep 24 06:31:28 nativespace-cdp sshd[1594251]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 06:31:28 nativespace-cdp sshd[1594251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.192.176.21
Sep 24 06:31:30 nativespace-cdp sshd[1594251]: Failed password for invalid user thomas from 45.192.176.21 port 58876 ssh2
Sep 24 06:31:32 nativespace-cdp sshd[1594251]: Received disconnect from 45.192.176.21 port 58876:11: Bye Bye [preauth]
Sep 24 06:31:32 nativespace-cdp sshd[1594251]: Disconnected from 45.192.176.21 port 58876 [preauth]
Sep 24 06:31:33 nativespace-cdp sshd[1594270]: Connection closed by 159.100.136.21 port 58882 [preauth]
Sep 24 06:32:01 nativespace-cdp sshd[1594332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.94.237.129  user=root
Sep 24 06:32:01 nativespace-cdp sshd[1594332]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 06:32:04 nativespace-cdp sshd[1594332]: Failed password for root from 181.94.237.129 port 41262 ssh2
Sep 24 06:32:11 nativespace-cdp sshd[1594404]: Invalid user user from 45.192.176.21 port 48524
Sep 24 06:32:11 nativespace-cdp sshd[1594404]: input_userauth_request: invalid user user [preauth]
Sep 24 06:32:11 nativespace-cdp sshd[1594404]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 06:32:11 nativespace-cdp sshd[1594404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.192.176.21
Sep 24 06:32:13 nativespace-cdp sshd[1594404]: Failed password for invalid user user from 45.192.176.21 port 48524 ssh2
Sep 24 06:36:33 nativespace-cdp sshd[1595328]: Connection closed by 159.100.136.21 port 40158 [preauth]
Sep 24 06:41:33 nativespace-cdp sshd[1596338]: Connection closed by 159.100.136.21 port 48748 [preauth]
Sep 24 06:46:33 nativespace-cdp sshd[1597684]: Connection closed by 159.100.136.21 port 58388 [preauth]
Sep 24 06:51:33 nativespace-cdp sshd[1598791]: Connection closed by 159.100.136.21 port 38610 [preauth]
Sep 24 06:56:34 nativespace-cdp sshd[1599738]: Connection closed by 159.100.136.21 port 46622 [preauth]
Sep 24 07:01:33 nativespace-cdp sshd[1601142]: Connection closed by 159.100.136.21 port 55388 [preauth]
Sep 24 07:06:33 nativespace-cdp sshd[1602224]: Connection closed by 159.100.136.21 port 35048 [preauth]
Sep 24 07:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 07:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:18 nativespace-cdp sudo[1602740]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 07:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:18 nativespace-cdp sudo[1602744]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 07:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:18 nativespace-cdp sudo[1602747]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 07:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:18 nativespace-cdp sudo[1602751]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 07:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:22 nativespace-cdp sudo[1602754]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:23 nativespace-cdp sudo[1602773]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:23 nativespace-cdp sudo[1602776]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:23 nativespace-cdp sudo[1602780]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:23 nativespace-cdp sudo[1602783]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:23 nativespace-cdp sudo[1602786]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:23 nativespace-cdp sudo[1602789]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 07:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:32 nativespace-cdp sudo[1602818]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 07:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:32 nativespace-cdp sudo[1602823]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=david user-2=careers user-3=nbhavers user-4=mcdermos user-5=chrisdal user-6=jennimil user-7=tomandle user-8=romaldki user-9=branko user-10=outdoorc user-11=ranxterc user-12=hodgsonmail user-13=onlycont user-14=lucy user-15=attlebor user-16=crrtipdl user-17=sosevalu user-18=bakery user-19=boldover user-20=nove user-21=design user-22=kategilpin user-23=dancinggardener user-24=stagingerris user-25=ladburyp user-26=nvihkvu user-27=havantho user-28=cath user-29=sketchy user-30=what user-31=oubpgvbx user-32=tstardom user-33=steve user-34=zebrapho user-35=bwppodcast user-36=asandcoc user-37=sibtoncc user-38=dhyana user-39=darkstar user-40=eatspam user-41=beauty user-42=nsceres user-43=fawcettd user-44=burydropin user-45=barbersh user-46=tigerlet user-47=nomistakes user-48=hidden user-49=smrszyqg
Sep 24 07:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=isleofwi user-51=steakbridieme user-52=donnychicago user-53=firstre5 user-54=ctedorgu user-55=philmcph user-56=lkpier user-57=foods user-58=leftie user-59=health2045 user-60=fortunaz user-61=nscdp user-62=courseme user-63=eugincou user-64=hirefootballgame user-65=cwsocial user-66=howardon user-67=paulmca1 user-68=pugwash user-69=ninejimm user-70=reliable user-71=cambria1 user-72=cathski user-73=highlegh user-74=southlon user-75=firstred user-76=costestimatorco user-77=firstrel user-78=clarkass user-79=opaiscyx user-80=coursemc user-81=firstres user-82=ultbcrra user-83=seftvta user-84=jonhartl user-85=thqkgnbz user-86=connectedshoppin user-87=ianrayne user-88=accooper user-89=fetch user-90=carsinyo user-91=hubmaster user-92=elecleis user-93=gilpin user-94=milloyco user-95=bemadonn user-96=newstoda user-97=ggaaorgu user-98=belle user-99=bedfords user-100=oneoarco user-101=battlere user-102=vivienn1
Sep 24 07:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstre2 user-104=nstriton user-105=brighto1 user-106=nativene user-107=askhform user-108=stuartge user-109=innovat1 user-110=skyfirec user-111=alexadmin user-112=ulsukarm user-113=lbscrmod user-114=maflemin user-115=vantagep user-116=athenare user-117=connect9 user-118=booff user-119=markward user-120=foundation user-121=leereyn1 user-122=stephani user-123=agproduc user-124=still user-125=hodgesonweb user-126=theblack user-127=spectrum user-128=jarvisin user-129=megacards user-130=musorguk user-131=wilsonsw user-132=atestord user-133=sarafoundation user-134=strathar user-135=brmrjxl user-136=lakesan1 user-137=magichat user-138=hhdugcor user-139=lbhyisi user-140=ptkxhsbt user-141=dickemery123 user-142=martsblo feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 24 07:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 07:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:34 nativespace-cdp sudo[1602828]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 07:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:35 nativespace-cdp sudo[1602836]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d6c8mHpU8PLgf567.~
Sep 24 07:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:35 nativespace-cdp sudo[1602839]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d6c8mHpU8PLgf567.~'
Sep 24 07:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:35 nativespace-cdp sudo[1602843]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d6c8mHpU8PLgf567.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 07:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:35 nativespace-cdp sudo[1602847]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 07:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:35 nativespace-cdp sudo[1602850]: pam_unix(sudo:session): session closed for user root
Sep 24 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 07:09:49 nativespace-cdp sudo[1602903]: pam_unix(sudo:session): session closed for user root
Sep 24 07:11:33 nativespace-cdp sshd[1603377]: Connection closed by 159.100.136.21 port 43988 [preauth]
Sep 24 07:16:34 nativespace-cdp sshd[1604616]: Connection closed by 159.100.136.21 port 53344 [preauth]
Sep 24 07:21:35 nativespace-cdp sshd[1605652]: Connection closed by 159.100.136.21 port 34136 [preauth]
Sep 24 07:26:33 nativespace-cdp sshd[1606623]: Connection closed by 159.100.136.21 port 42704 [preauth]
Sep 24 07:31:33 nativespace-cdp sshd[1607981]: Connection closed by 159.100.136.21 port 51488 [preauth]
Sep 24 07:32:17 nativespace-cdp sshd[1608184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.93.186.125  user=root
Sep 24 07:32:17 nativespace-cdp sshd[1608184]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 07:32:20 nativespace-cdp sshd[1608184]: Failed password for root from 61.93.186.125 port 37891 ssh2
Sep 24 07:32:20 nativespace-cdp sshd[1608184]: Received disconnect from 61.93.186.125 port 37891:11: Bye Bye [preauth]
Sep 24 07:32:20 nativespace-cdp sshd[1608184]: Disconnected from 61.93.186.125 port 37891 [preauth]
Sep 24 07:36:33 nativespace-cdp sshd[1609088]: Connection closed by 159.100.136.21 port 32792 [preauth]
Sep 24 07:37:44 nativespace-cdp sshd[1609352]: Invalid user admin from 61.93.186.125 port 35959
Sep 24 07:37:44 nativespace-cdp sshd[1609352]: input_userauth_request: invalid user admin [preauth]
Sep 24 07:37:44 nativespace-cdp sshd[1609352]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:37:44 nativespace-cdp sshd[1609352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.93.186.125
Sep 24 07:37:46 nativespace-cdp sshd[1609352]: Failed password for invalid user admin from 61.93.186.125 port 35959 ssh2
Sep 24 07:37:50 nativespace-cdp sshd[1609352]: Received disconnect from 61.93.186.125 port 35959:11: Bye Bye [preauth]
Sep 24 07:37:50 nativespace-cdp sshd[1609352]: Disconnected from 61.93.186.125 port 35959 [preauth]
Sep 24 07:38:28 nativespace-cdp sshd[1609468]: Invalid user basesystem from 61.93.186.125 port 42351
Sep 24 07:38:28 nativespace-cdp sshd[1609468]: input_userauth_request: invalid user basesystem [preauth]
Sep 24 07:38:28 nativespace-cdp sshd[1609468]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:38:28 nativespace-cdp sshd[1609468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.93.186.125
Sep 24 07:38:30 nativespace-cdp sshd[1609468]: Failed password for invalid user basesystem from 61.93.186.125 port 42351 ssh2
Sep 24 07:38:31 nativespace-cdp sshd[1609468]: Received disconnect from 61.93.186.125 port 42351:11: Bye Bye [preauth]
Sep 24 07:38:31 nativespace-cdp sshd[1609468]: Disconnected from 61.93.186.125 port 42351 [preauth]
Sep 24 07:41:35 nativespace-cdp sshd[1610106]: Connection closed by 159.100.136.21 port 39742 [preauth]
Sep 24 07:43:31 nativespace-cdp sshd[1610483]: Invalid user acer from 47.240.45.5 port 59742
Sep 24 07:43:31 nativespace-cdp sshd[1610483]: input_userauth_request: invalid user acer [preauth]
Sep 24 07:43:31 nativespace-cdp sshd[1610483]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:43:31 nativespace-cdp sshd[1610483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.240.45.5
Sep 24 07:43:33 nativespace-cdp sshd[1610483]: Failed password for invalid user acer from 47.240.45.5 port 59742 ssh2
Sep 24 07:43:34 nativespace-cdp sshd[1610483]: Received disconnect from 47.240.45.5 port 59742:11: Bye Bye [preauth]
Sep 24 07:43:34 nativespace-cdp sshd[1610483]: Disconnected from 47.240.45.5 port 59742 [preauth]
Sep 24 07:43:38 nativespace-cdp sshd[1610515]: Invalid user username from 164.163.249.64 port 48280
Sep 24 07:43:38 nativespace-cdp sshd[1610515]: input_userauth_request: invalid user username [preauth]
Sep 24 07:43:38 nativespace-cdp sshd[1610515]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:43:38 nativespace-cdp sshd[1610515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.249.64
Sep 24 07:43:39 nativespace-cdp sshd[1610515]: Failed password for invalid user username from 164.163.249.64 port 48280 ssh2
Sep 24 07:43:42 nativespace-cdp sshd[1610515]: Received disconnect from 164.163.249.64 port 48280:11: Bye Bye [preauth]
Sep 24 07:43:42 nativespace-cdp sshd[1610515]: Disconnected from 164.163.249.64 port 48280 [preauth]
Sep 24 07:44:08 nativespace-cdp sshd[1610843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.147.251.229  user=root
Sep 24 07:44:08 nativespace-cdp sshd[1610843]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 07:44:11 nativespace-cdp sshd[1610843]: Failed password for root from 45.147.251.229 port 44778 ssh2
Sep 24 07:44:11 nativespace-cdp sshd[1610843]: Received disconnect from 45.147.251.229 port 44778:11: Bye Bye [preauth]
Sep 24 07:44:11 nativespace-cdp sshd[1610843]: Disconnected from 45.147.251.229 port 44778 [preauth]
Sep 24 07:45:38 nativespace-cdp sshd[1611231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.240.45.5  user=root
Sep 24 07:45:38 nativespace-cdp sshd[1611231]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 07:45:40 nativespace-cdp sshd[1611231]: Failed password for root from 47.240.45.5 port 35616 ssh2
Sep 24 07:45:40 nativespace-cdp sshd[1611231]: Received disconnect from 47.240.45.5 port 35616:11: Bye Bye [preauth]
Sep 24 07:45:40 nativespace-cdp sshd[1611231]: Disconnected from 47.240.45.5 port 35616 [preauth]
Sep 24 07:45:49 nativespace-cdp sshd[1611276]: Invalid user copia from 122.154.162.19 port 45880
Sep 24 07:45:49 nativespace-cdp sshd[1611276]: input_userauth_request: invalid user copia [preauth]
Sep 24 07:45:49 nativespace-cdp sshd[1611276]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:45:49 nativespace-cdp sshd[1611276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.162.19
Sep 24 07:45:52 nativespace-cdp sshd[1611276]: Failed password for invalid user copia from 122.154.162.19 port 45880 ssh2
Sep 24 07:45:52 nativespace-cdp sshd[1611276]: Received disconnect from 122.154.162.19 port 45880:11: Bye Bye [preauth]
Sep 24 07:45:52 nativespace-cdp sshd[1611276]: Disconnected from 122.154.162.19 port 45880 [preauth]
Sep 24 07:46:33 nativespace-cdp sshd[1611438]: Connection closed by 159.100.136.21 port 48934 [preauth]
Sep 24 07:46:36 nativespace-cdp sshd[1611434]: Invalid user acer from 220.86.29.35 port 64026
Sep 24 07:46:36 nativespace-cdp sshd[1611434]: input_userauth_request: invalid user acer [preauth]
Sep 24 07:46:36 nativespace-cdp sshd[1611434]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:46:36 nativespace-cdp sshd[1611434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.86.29.35
Sep 24 07:46:38 nativespace-cdp sshd[1611434]: Failed password for invalid user acer from 220.86.29.35 port 64026 ssh2
Sep 24 07:46:40 nativespace-cdp sshd[1611434]: Received disconnect from 220.86.29.35 port 64026:11: Bye Bye [preauth]
Sep 24 07:46:40 nativespace-cdp sshd[1611434]: Disconnected from 220.86.29.35 port 64026 [preauth]
Sep 24 07:47:38 nativespace-cdp sshd[1611758]: Invalid user ubuntu from 146.190.104.244 port 39490
Sep 24 07:47:38 nativespace-cdp sshd[1611758]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 07:47:38 nativespace-cdp sshd[1611758]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:47:38 nativespace-cdp sshd[1611758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.104.244
Sep 24 07:47:40 nativespace-cdp sshd[1611758]: Failed password for invalid user ubuntu from 146.190.104.244 port 39490 ssh2
Sep 24 07:47:43 nativespace-cdp sshd[1611758]: Received disconnect from 146.190.104.244 port 39490:11: Bye Bye [preauth]
Sep 24 07:47:43 nativespace-cdp sshd[1611758]: Disconnected from 146.190.104.244 port 39490 [preauth]
Sep 24 07:48:26 nativespace-cdp sshd[1611870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.107.230  user=root
Sep 24 07:48:26 nativespace-cdp sshd[1611870]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 07:48:27 nativespace-cdp sshd[1611870]: Failed password for root from 85.245.107.230 port 51083 ssh2
Sep 24 07:48:27 nativespace-cdp sshd[1611870]: Received disconnect from 85.245.107.230 port 51083:11: Bye Bye [preauth]
Sep 24 07:48:27 nativespace-cdp sshd[1611870]: Disconnected from 85.245.107.230 port 51083 [preauth]
Sep 24 07:48:34 nativespace-cdp sshd[1611885]: Invalid user nexus from 45.147.251.229 port 28338
Sep 24 07:48:34 nativespace-cdp sshd[1611885]: input_userauth_request: invalid user nexus [preauth]
Sep 24 07:48:34 nativespace-cdp sshd[1611885]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:48:34 nativespace-cdp sshd[1611885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.147.251.229
Sep 24 07:48:36 nativespace-cdp sshd[1611885]: Failed password for invalid user nexus from 45.147.251.229 port 28338 ssh2
Sep 24 07:48:37 nativespace-cdp sshd[1611885]: Received disconnect from 45.147.251.229 port 28338:11: Bye Bye [preauth]
Sep 24 07:48:37 nativespace-cdp sshd[1611885]: Disconnected from 45.147.251.229 port 28338 [preauth]
Sep 24 07:48:55 nativespace-cdp sshd[1611951]: Invalid user sysadmin from 47.240.45.5 port 26976
Sep 24 07:48:55 nativespace-cdp sshd[1611951]: input_userauth_request: invalid user sysadmin [preauth]
Sep 24 07:48:55 nativespace-cdp sshd[1611951]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:48:55 nativespace-cdp sshd[1611951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.240.45.5
Sep 24 07:48:57 nativespace-cdp sshd[1611951]: Failed password for invalid user sysadmin from 47.240.45.5 port 26976 ssh2
Sep 24 07:48:57 nativespace-cdp sshd[1611951]: Received disconnect from 47.240.45.5 port 26976:11: Bye Bye [preauth]
Sep 24 07:48:57 nativespace-cdp sshd[1611951]: Disconnected from 47.240.45.5 port 26976 [preauth]
Sep 24 07:48:58 nativespace-cdp sshd[1611971]: Invalid user test from 164.163.249.64 port 38970
Sep 24 07:48:58 nativespace-cdp sshd[1611971]: input_userauth_request: invalid user test [preauth]
Sep 24 07:48:58 nativespace-cdp sshd[1611971]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:48:58 nativespace-cdp sshd[1611971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.249.64
Sep 24 07:49:00 nativespace-cdp sshd[1611971]: Failed password for invalid user test from 164.163.249.64 port 38970 ssh2
Sep 24 07:49:04 nativespace-cdp sshd[1611971]: Received disconnect from 164.163.249.64 port 38970:11: Bye Bye [preauth]
Sep 24 07:49:04 nativespace-cdp sshd[1611971]: Disconnected from 164.163.249.64 port 38970 [preauth]
Sep 24 07:49:04 nativespace-cdp sshd[1612013]: Invalid user test_user from 220.86.29.35 port 21352
Sep 24 07:49:04 nativespace-cdp sshd[1612013]: input_userauth_request: invalid user test_user [preauth]
Sep 24 07:49:04 nativespace-cdp sshd[1612013]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:49:04 nativespace-cdp sshd[1612013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.86.29.35
Sep 24 07:49:06 nativespace-cdp sshd[1612013]: Failed password for invalid user test_user from 220.86.29.35 port 21352 ssh2
Sep 24 07:49:06 nativespace-cdp sshd[1612013]: Received disconnect from 220.86.29.35 port 21352:11: Bye Bye [preauth]
Sep 24 07:49:06 nativespace-cdp sshd[1612013]: Disconnected from 220.86.29.35 port 21352 [preauth]
Sep 24 07:49:08 nativespace-cdp sshd[1612020]: Invalid user svn from 122.154.162.19 port 51380
Sep 24 07:49:08 nativespace-cdp sshd[1612020]: input_userauth_request: invalid user svn [preauth]
Sep 24 07:49:08 nativespace-cdp sshd[1612020]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:49:08 nativespace-cdp sshd[1612020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.162.19
Sep 24 07:49:09 nativespace-cdp sshd[1612020]: Failed password for invalid user svn from 122.154.162.19 port 51380 ssh2
Sep 24 07:49:09 nativespace-cdp sshd[1612020]: Received disconnect from 122.154.162.19 port 51380:11: Bye Bye [preauth]
Sep 24 07:49:09 nativespace-cdp sshd[1612020]: Disconnected from 122.154.162.19 port 51380 [preauth]
Sep 24 07:49:10 nativespace-cdp sshd[1612030]: Invalid user ubuntu from 45.147.251.229 port 50892
Sep 24 07:49:10 nativespace-cdp sshd[1612030]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 07:49:11 nativespace-cdp sshd[1612030]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:49:11 nativespace-cdp sshd[1612030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.147.251.229
Sep 24 07:49:13 nativespace-cdp sshd[1612030]: Failed password for invalid user ubuntu from 45.147.251.229 port 50892 ssh2
Sep 24 07:49:19 nativespace-cdp sshd[1612068]: Invalid user ubuntu from 146.190.104.244 port 58500
Sep 24 07:49:19 nativespace-cdp sshd[1612068]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 07:49:19 nativespace-cdp sshd[1612068]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:49:19 nativespace-cdp sshd[1612068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.104.244
Sep 24 07:49:21 nativespace-cdp sshd[1612068]: Failed password for invalid user ubuntu from 146.190.104.244 port 58500 ssh2
Sep 24 07:49:21 nativespace-cdp sshd[1612068]: Received disconnect from 146.190.104.244 port 58500:11: Bye Bye [preauth]
Sep 24 07:49:21 nativespace-cdp sshd[1612068]: Disconnected from 146.190.104.244 port 58500 [preauth]
Sep 24 07:49:27 nativespace-cdp sshd[1612082]: Invalid user usuario from 85.245.107.230 port 62429
Sep 24 07:49:27 nativespace-cdp sshd[1612082]: input_userauth_request: invalid user usuario [preauth]
Sep 24 07:49:27 nativespace-cdp sshd[1612082]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:49:27 nativespace-cdp sshd[1612082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.107.230
Sep 24 07:49:29 nativespace-cdp sshd[1612082]: Failed password for invalid user usuario from 85.245.107.230 port 62429 ssh2
Sep 24 07:49:29 nativespace-cdp sshd[1612082]: Received disconnect from 85.245.107.230 port 62429:11: Bye Bye [preauth]
Sep 24 07:49:29 nativespace-cdp sshd[1612082]: Disconnected from 85.245.107.230 port 62429 [preauth]
Sep 24 07:49:54 nativespace-cdp sshd[1612148]: Invalid user user from 220.86.29.35 port 27778
Sep 24 07:49:54 nativespace-cdp sshd[1612148]: input_userauth_request: invalid user user [preauth]
Sep 24 07:49:54 nativespace-cdp sshd[1612148]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:49:54 nativespace-cdp sshd[1612148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.86.29.35
Sep 24 07:49:56 nativespace-cdp sshd[1612148]: Failed password for invalid user user from 220.86.29.35 port 27778 ssh2
Sep 24 07:49:56 nativespace-cdp sshd[1612163]: Invalid user superman from 122.154.162.19 port 36046
Sep 24 07:49:56 nativespace-cdp sshd[1612163]: input_userauth_request: invalid user superman [preauth]
Sep 24 07:49:56 nativespace-cdp sshd[1612163]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:49:56 nativespace-cdp sshd[1612163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.162.19
Sep 24 07:49:56 nativespace-cdp sshd[1612148]: Received disconnect from 220.86.29.35 port 27778:11: Bye Bye [preauth]
Sep 24 07:49:56 nativespace-cdp sshd[1612148]: Disconnected from 220.86.29.35 port 27778 [preauth]
Sep 24 07:49:58 nativespace-cdp sshd[1612163]: Failed password for invalid user superman from 122.154.162.19 port 36046 ssh2
Sep 24 07:50:06 nativespace-cdp sshd[1612354]: Invalid user test from 85.245.107.230 port 59050
Sep 24 07:50:06 nativespace-cdp sshd[1612354]: input_userauth_request: invalid user test [preauth]
Sep 24 07:50:06 nativespace-cdp sshd[1612354]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:50:06 nativespace-cdp sshd[1612354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.107.230
Sep 24 07:50:08 nativespace-cdp sshd[1612354]: Failed password for invalid user test from 85.245.107.230 port 59050 ssh2
Sep 24 07:50:10 nativespace-cdp sshd[1612389]: Invalid user sysadmin from 146.190.104.244 port 42852
Sep 24 07:50:10 nativespace-cdp sshd[1612389]: input_userauth_request: invalid user sysadmin [preauth]
Sep 24 07:50:10 nativespace-cdp sshd[1612389]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:50:10 nativespace-cdp sshd[1612389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.104.244
Sep 24 07:50:12 nativespace-cdp sshd[1612389]: Failed password for invalid user sysadmin from 146.190.104.244 port 42852 ssh2
Sep 24 07:50:12 nativespace-cdp sshd[1612389]: Received disconnect from 146.190.104.244 port 42852:11: Bye Bye [preauth]
Sep 24 07:50:12 nativespace-cdp sshd[1612389]: Disconnected from 146.190.104.244 port 42852 [preauth]
Sep 24 07:50:39 nativespace-cdp sshd[1612512]: Invalid user sysadmin from 164.163.249.64 port 3817
Sep 24 07:50:39 nativespace-cdp sshd[1612512]: input_userauth_request: invalid user sysadmin [preauth]
Sep 24 07:50:39 nativespace-cdp sshd[1612512]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:50:39 nativespace-cdp sshd[1612512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.249.64
Sep 24 07:50:41 nativespace-cdp sshd[1612512]: Failed password for invalid user sysadmin from 164.163.249.64 port 3817 ssh2
Sep 24 07:50:41 nativespace-cdp sshd[1612512]: Received disconnect from 164.163.249.64 port 3817:11: Bye Bye [preauth]
Sep 24 07:50:41 nativespace-cdp sshd[1612512]: Disconnected from 164.163.249.64 port 3817 [preauth]
Sep 24 07:51:33 nativespace-cdp sshd[1612757]: Connection closed by 159.100.136.21 port 57370 [preauth]
Sep 24 07:56:33 nativespace-cdp sshd[1613752]: Connection closed by 159.100.136.21 port 38262 [preauth]
Sep 24 07:59:34 nativespace-cdp sshd[1614519]: Invalid user user from 171.244.134.21 port 36476
Sep 24 07:59:34 nativespace-cdp sshd[1614519]: input_userauth_request: invalid user user [preauth]
Sep 24 07:59:34 nativespace-cdp sshd[1614519]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:59:34 nativespace-cdp sshd[1614519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.134.21
Sep 24 07:59:36 nativespace-cdp sshd[1614519]: Failed password for invalid user user from 171.244.134.21 port 36476 ssh2
Sep 24 07:59:36 nativespace-cdp sshd[1614519]: Received disconnect from 171.244.134.21 port 36476:11: Bye Bye [preauth]
Sep 24 07:59:36 nativespace-cdp sshd[1614519]: Disconnected from 171.244.134.21 port 36476 [preauth]
Sep 24 07:59:41 nativespace-cdp sshd[1614545]: Invalid user jenkins from 137.184.140.59 port 46790
Sep 24 07:59:41 nativespace-cdp sshd[1614545]: input_userauth_request: invalid user jenkins [preauth]
Sep 24 07:59:41 nativespace-cdp sshd[1614545]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 07:59:41 nativespace-cdp sshd[1614545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.140.59
Sep 24 07:59:43 nativespace-cdp sshd[1614545]: Failed password for invalid user jenkins from 137.184.140.59 port 46790 ssh2
Sep 24 07:59:43 nativespace-cdp sshd[1614545]: Received disconnect from 137.184.140.59 port 46790:11: Bye Bye [preauth]
Sep 24 07:59:43 nativespace-cdp sshd[1614545]: Disconnected from 137.184.140.59 port 46790 [preauth]
Sep 24 08:01:01 nativespace-cdp sshd[1615075]: Invalid user smart from 103.181.143.96 port 56614
Sep 24 08:01:01 nativespace-cdp sshd[1615075]: input_userauth_request: invalid user smart [preauth]
Sep 24 08:01:01 nativespace-cdp sshd[1615075]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 08:01:01 nativespace-cdp sshd[1615075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.143.96
Sep 24 08:01:04 nativespace-cdp sshd[1615075]: Failed password for invalid user smart from 103.181.143.96 port 56614 ssh2
Sep 24 08:01:04 nativespace-cdp sshd[1615075]: Received disconnect from 103.181.143.96 port 56614:11: Bye Bye [preauth]
Sep 24 08:01:04 nativespace-cdp sshd[1615075]: Disconnected from 103.181.143.96 port 56614 [preauth]
Sep 24 08:01:36 nativespace-cdp sshd[1615248]: Connection closed by 159.100.136.21 port 47602 [preauth]
Sep 24 08:04:04 nativespace-cdp sshd[1615903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.238.32.247  user=root
Sep 24 08:04:04 nativespace-cdp sshd[1615903]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 08:04:06 nativespace-cdp sshd[1615903]: Failed password for root from 46.238.32.247 port 34338 ssh2
Sep 24 08:04:06 nativespace-cdp sshd[1615903]: Received disconnect from 46.238.32.247 port 34338:11: Bye Bye [preauth]
Sep 24 08:04:06 nativespace-cdp sshd[1615903]: Disconnected from 46.238.32.247 port 34338 [preauth]
Sep 24 08:05:35 nativespace-cdp sshd[1616290]: Invalid user oracle from 137.184.140.59 port 46832
Sep 24 08:05:35 nativespace-cdp sshd[1616290]: input_userauth_request: invalid user oracle [preauth]
Sep 24 08:05:35 nativespace-cdp sshd[1616290]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 08:05:35 nativespace-cdp sshd[1616290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.140.59
Sep 24 08:05:36 nativespace-cdp sshd[1616290]: Failed password for invalid user oracle from 137.184.140.59 port 46832 ssh2
Sep 24 08:05:37 nativespace-cdp sshd[1616290]: Received disconnect from 137.184.140.59 port 46832:11: Bye Bye [preauth]
Sep 24 08:05:37 nativespace-cdp sshd[1616290]: Disconnected from 137.184.140.59 port 46832 [preauth]
Sep 24 08:06:06 nativespace-cdp sshd[1616381]: Invalid user iptv from 46.238.32.247 port 58090
Sep 24 08:06:06 nativespace-cdp sshd[1616381]: input_userauth_request: invalid user iptv [preauth]
Sep 24 08:06:06 nativespace-cdp sshd[1616381]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 08:06:06 nativespace-cdp sshd[1616381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.238.32.247
Sep 24 08:06:08 nativespace-cdp sshd[1616381]: Failed password for invalid user iptv from 46.238.32.247 port 58090 ssh2
Sep 24 08:06:09 nativespace-cdp sshd[1616381]: Received disconnect from 46.238.32.247 port 58090:11: Bye Bye [preauth]
Sep 24 08:06:09 nativespace-cdp sshd[1616381]: Disconnected from 46.238.32.247 port 58090 [preauth]
Sep 24 08:06:10 nativespace-cdp sshd[1616383]: Invalid user reza from 171.244.134.21 port 39782
Sep 24 08:06:10 nativespace-cdp sshd[1616383]: input_userauth_request: invalid user reza [preauth]
Sep 24 08:06:10 nativespace-cdp sshd[1616383]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 08:06:10 nativespace-cdp sshd[1616383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.134.21
Sep 24 08:06:11 nativespace-cdp sshd[1616383]: Failed password for invalid user reza from 171.244.134.21 port 39782 ssh2
Sep 24 08:06:11 nativespace-cdp sshd[1616383]: Received disconnect from 171.244.134.21 port 39782:11: Bye Bye [preauth]
Sep 24 08:06:11 nativespace-cdp sshd[1616383]: Disconnected from 171.244.134.21 port 39782 [preauth]
Sep 24 08:06:16 nativespace-cdp sshd[1616403]: Invalid user nextcloud from 137.184.140.59 port 56670
Sep 24 08:06:16 nativespace-cdp sshd[1616403]: input_userauth_request: invalid user nextcloud [preauth]
Sep 24 08:06:16 nativespace-cdp sshd[1616403]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 08:06:16 nativespace-cdp sshd[1616403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.140.59
Sep 24 08:06:18 nativespace-cdp sshd[1616403]: Failed password for invalid user nextcloud from 137.184.140.59 port 56670 ssh2
Sep 24 08:06:18 nativespace-cdp sshd[1616403]: Received disconnect from 137.184.140.59 port 56670:11: Bye Bye [preauth]
Sep 24 08:06:18 nativespace-cdp sshd[1616403]: Disconnected from 137.184.140.59 port 56670 [preauth]
Sep 24 08:06:33 nativespace-cdp sshd[1616499]: Connection closed by 159.100.136.21 port 57380 [preauth]
Sep 24 08:06:45 nativespace-cdp sshd[1616536]: Invalid user minecraft from 46.238.32.247 port 42474
Sep 24 08:06:45 nativespace-cdp sshd[1616536]: input_userauth_request: invalid user minecraft [preauth]
Sep 24 08:06:45 nativespace-cdp sshd[1616536]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 08:06:45 nativespace-cdp sshd[1616536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.238.32.247
Sep 24 08:06:47 nativespace-cdp sshd[1616536]: Failed password for invalid user minecraft from 46.238.32.247 port 42474 ssh2
Sep 24 08:06:51 nativespace-cdp sshd[1616536]: Received disconnect from 46.238.32.247 port 42474:11: Bye Bye [preauth]
Sep 24 08:06:51 nativespace-cdp sshd[1616536]: Disconnected from 46.238.32.247 port 42474 [preauth]
Sep 24 08:06:58 nativespace-cdp sshd[1616590]: Invalid user sysadmin from 171.244.134.21 port 52138
Sep 24 08:06:58 nativespace-cdp sshd[1616590]: input_userauth_request: invalid user sysadmin [preauth]
Sep 24 08:06:58 nativespace-cdp sshd[1616590]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 08:06:58 nativespace-cdp sshd[1616590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.134.21
Sep 24 08:07:00 nativespace-cdp sshd[1616590]: Failed password for invalid user sysadmin from 171.244.134.21 port 52138 ssh2
Sep 24 08:07:00 nativespace-cdp sshd[1616590]: Received disconnect from 171.244.134.21 port 52138:11: Bye Bye [preauth]
Sep 24 08:07:00 nativespace-cdp sshd[1616590]: Disconnected from 171.244.134.21 port 52138 [preauth]
Sep 24 08:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 08:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:36 nativespace-cdp sudo[1617252]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 08:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:36 nativespace-cdp sudo[1617256]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 08:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:36 nativespace-cdp sshd[1617246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.143.96  user=root
Sep 24 08:09:36 nativespace-cdp sshd[1617246]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 08:09:38 nativespace-cdp sshd[1617246]: Failed password for root from 103.181.143.96 port 50114 ssh2
Sep 24 08:09:38 nativespace-cdp sudo[1617259]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:38 nativespace-cdp sshd[1617246]: Received disconnect from 103.181.143.96 port 50114:11: Bye Bye [preauth]
Sep 24 08:09:38 nativespace-cdp sshd[1617246]: Disconnected from 103.181.143.96 port 50114 [preauth]
Sep 24 08:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 08:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:38 nativespace-cdp sudo[1617269]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 08:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:43 nativespace-cdp sudo[1617273]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:43 nativespace-cdp sudo[1617291]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:43 nativespace-cdp sudo[1617294]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:43 nativespace-cdp sudo[1617298]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:43 nativespace-cdp sudo[1617301]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:43 nativespace-cdp sudo[1617304]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:43 nativespace-cdp sudo[1617307]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 08:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:52 nativespace-cdp sudo[1617338]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 08:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:54 nativespace-cdp sudo[1617343]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nove user-2=boldover user-3=bakery user-4=crrtipdl user-5=sosevalu user-6=tstardom user-7=oubpgvbx user-8=what user-9=havantho user-10=sketchy user-11=cath user-12=nvihkvu user-13=stagingerris user-14=dancinggardener user-15=ladburyp user-16=kategilpin user-17=design user-18=tomandle user-19=jennimil user-20=chrisdal user-21=mcdermos user-22=david user-23=careers user-24=nbhavers user-25=lucy user-26=attlebor user-27=onlycont user-28=hodgsonmail user-29=ranxterc user-30=outdoorc user-31=branko user-32=romaldki user-33=nscdp user-34=foods user-35=leftie user-36=fortunaz user-37=health2045 user-38=lkpier user-39=steakbridieme user-40=donnychicago user-41=firstre5 user-42=ctedorgu user-43=philmcph user-44=isleofwi user-45=smrszyqg user-46=nomistakes user-47=hidden user-48=barbersh user-49=tigerlet
Sep 24 08:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=cathski user-51=cambria1 user-52=ninejimm user-53=reliable user-54=cwsocial user-55=howardon user-56=pugwash user-57=paulmca1 user-58=hirefootballgame user-59=eugincou user-60=courseme user-61=asandcoc user-62=sibtoncc user-63=bwppodcast user-64=zebrapho user-65=steve user-66=fawcettd user-67=burydropin user-68=nsceres user-69=beauty user-70=darkstar user-71=eatspam user-72=dhyana user-73=nstriton user-74=brighto1 user-75=vivienn1 user-76=firstre2 user-77=oneoarco user-78=battlere user-79=bedfords user-80=newstoda user-81=ggaaorgu user-82=belle user-83=bemadonn user-84=alexadmin user-85=skyfirec user-86=innovat1 user-87=stuartge user-88=askhform user-89=nativene user-90=ultbcrra user-91=jonhartl user-92=seftvta user-93=firstres user-94=opaiscyx user-95=coursemc user-96=clarkass user-97=firstrel user-98=costestimatorco user-99=firstred user-100=highlegh user-101=southlon user-102=gilpin user-103=milloyco
Sep 24 08:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=elecleis user-105=hubmaster user-106=fetch user-107=carsinyo user-108=accooper user-109=ianrayne user-110=connectedshoppin user-111=thqkgnbz user-112=lakesan1 user-113=brmrjxl user-114=strathar user-115=atestord user-116=sarafoundation user-117=wilsonsw user-118=megacards user-119=musorguk user-120=martsblo user-121=dickemery123 user-122=ptkxhsbt user-123=hhdugcor user-124=lbhyisi user-125=magichat user-126=foundation user-127=markward user-128=booff user-129=vantagep user-130=athenare user-131=connect9 user-132=lbscrmod user-133=maflemin user-134=ulsukarm user-135=jarvisin user-136=spectrum user-137=hodgesonweb user-138=theblack user-139=agproduc user-140=still user-141=stephani user-142=leereyn1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 24 08:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 08:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:56 nativespace-cdp sudo[1617359]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:57 nativespace-cdp sudo[1617370]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-t0ug4F9s3WSE9IoT.~
Sep 24 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:57 nativespace-cdp sudo[1617373]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-t0ug4F9s3WSE9IoT.~'
Sep 24 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:57 nativespace-cdp sudo[1617376]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-t0ug4F9s3WSE9IoT.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:57 nativespace-cdp sudo[1617380]: pam_unix(sudo:session): session closed for user root
Sep 24 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:09:57 nativespace-cdp sudo[1617383]: pam_unix(sudo:session): session closed for user root
Sep 24 08:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 08:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 08:10:18 nativespace-cdp sudo[1617636]: pam_unix(sudo:session): session closed for user root
Sep 24 08:10:42 nativespace-cdp sshd[1617695]: Connection closed by 103.181.143.96 port 60088 [preauth]
Sep 24 08:11:33 nativespace-cdp sshd[1617851]: Invalid user server from 103.181.143.96 port 42412
Sep 24 08:11:33 nativespace-cdp sshd[1617851]: input_userauth_request: invalid user server [preauth]
Sep 24 08:11:33 nativespace-cdp sshd[1617851]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 08:11:33 nativespace-cdp sshd[1617851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.143.96
Sep 24 08:11:35 nativespace-cdp sshd[1617851]: Failed password for invalid user server from 103.181.143.96 port 42412 ssh2
Sep 24 08:11:38 nativespace-cdp sshd[1617851]: Received disconnect from 103.181.143.96 port 42412:11: Bye Bye [preauth]
Sep 24 08:11:38 nativespace-cdp sshd[1617851]: Disconnected from 103.181.143.96 port 42412 [preauth]
Sep 24 08:11:40 nativespace-cdp sshd[1617863]: Connection closed by 159.100.136.21 port 38324 [preauth]
Sep 24 08:16:33 nativespace-cdp sshd[1619246]: Connection closed by 159.100.136.21 port 47534 [preauth]
Sep 24 08:21:33 nativespace-cdp sshd[1620505]: Connection closed by 159.100.136.21 port 56804 [preauth]
Sep 24 08:26:33 nativespace-cdp sshd[1621620]: Connection closed by 159.100.136.21 port 38360 [preauth]
Sep 24 08:31:33 nativespace-cdp sshd[1623360]: Connection closed by 159.100.136.21 port 47502 [preauth]
Sep 24 08:36:33 nativespace-cdp sshd[1624383]: Connection closed by 159.100.136.21 port 56984 [preauth]
Sep 24 08:41:36 nativespace-cdp sshd[1625567]: Connection closed by 159.100.136.21 port 37796 [preauth]
Sep 24 08:46:35 nativespace-cdp sshd[1626994]: Connection closed by 159.100.136.21 port 47088 [preauth]
Sep 24 08:51:33 nativespace-cdp sshd[1628201]: Connection closed by 159.100.136.21 port 56526 [preauth]
Sep 24 08:52:09 nativespace-cdp sshd[1628312]: Did not receive identification string from 167.94.145.111 port 50566
Sep 24 08:52:35 nativespace-cdp sshd[1628342]: Connection closed by 167.94.145.111 port 36032 [preauth]
Sep 24 08:56:34 nativespace-cdp sshd[1629253]: Connection closed by 159.100.136.21 port 37430 [preauth]
Sep 24 09:01:33 nativespace-cdp sshd[1630747]: Connection closed by 159.100.136.21 port 46722 [preauth]
Sep 24 09:06:35 nativespace-cdp sshd[1631971]: Connection closed by 159.100.136.21 port 56164 [preauth]
Sep 24 09:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 09:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:28 nativespace-cdp sudo[1632652]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 09:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:28 nativespace-cdp sudo[1632656]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 09:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:29 nativespace-cdp sudo[1632659]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 09:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:29 nativespace-cdp sudo[1632664]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 09:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:32 nativespace-cdp sudo[1632667]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:32 nativespace-cdp sudo[1632692]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:32 nativespace-cdp sudo[1632695]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:32 nativespace-cdp sudo[1632698]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:32 nativespace-cdp sudo[1632701]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:32 nativespace-cdp sudo[1632704]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:32 nativespace-cdp sudo[1632707]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 09:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:34 nativespace-cdp sudo[1632716]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 09:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:35 nativespace-cdp sudo[1632720]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cwsocial user-2=howardon user-3=paulmca1 user-4=pugwash user-5=reliable user-6=ninejimm user-7=cambria1 user-8=cathski user-9=courseme user-10=eugincou user-11=hirefootballgame user-12=firstre5 user-13=donnychicago user-14=steakbridieme user-15=ctedorgu user-16=philmcph user-17=lkpier user-18=leftie user-19=foods user-20=health2045 user-21=fortunaz user-22=nscdp user-23=barbersh user-24=tigerlet user-25=nomistakes user-26=hidden user-27=smrszyqg user-28=isleofwi user-29=nsceres user-30=fawcettd user-31=burydropin user-32=dhyana user-33=darkstar user-34=eatspam user-35=beauty user-36=asandcoc user-37=sibtoncc user-38=steve user-39=zebrapho user-40=bwppodcast user-41=nvihkvu user-42=havantho user-43=sketchy user-44=cath user-45=what user-46=oubpgvbx user-47=tstardom user-48=design
Sep 24 09:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=kategilpin user-50=dancinggardener user-51=stagingerris user-52=ladburyp user-53=boldover user-54=nove user-55=crrtipdl user-56=sosevalu user-57=bakery user-58=onlycont user-59=lucy user-60=attlebor user-61=romaldki user-62=branko user-63=outdoorc user-64=hodgsonmail user-65=ranxterc user-66=jennimil user-67=tomandle user-68=david user-69=nbhavers user-70=careers user-71=mcdermos user-72=chrisdal user-73=ptkxhsbt user-74=dickemery123 user-75=martsblo user-76=magichat user-77=hhdugcor user-78=lbhyisi user-79=atestord user-80=sarafoundation user-81=strathar user-82=brmrjxl user-83=lakesan1 user-84=megacards user-85=musorguk user-86=wilsonsw user-87=hodgesonweb user-88=theblack user-89=spectrum user-90=jarvisin user-91=leereyn1 user-92=stephani user-93=agproduc user-94=still user-95=lbscrmod user-96=maflemin user-97=vantagep user-98=athenare user-99=connect9 user-100=markward user-101=booff
Sep 24 09:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=foundation user-103=ulsukarm user-104=skyfirec user-105=alexadmin user-106=nativene user-107=stuartge user-108=askhform user-109=innovat1 user-110=oneoarco user-111=battlere user-112=vivienn1 user-113=firstre2 user-114=nstriton user-115=brighto1 user-116=bemadonn user-117=newstoda user-118=ggaaorgu user-119=belle user-120=bedfords user-121=fetch user-122=carsinyo user-123=hubmaster user-124=elecleis user-125=milloyco user-126=gilpin user-127=thqkgnbz user-128=connectedshoppin user-129=ianrayne user-130=accooper user-131=opaiscyx user-132=coursemc user-133=firstres user-134=ultbcrra user-135=jonhartl user-136=seftvta user-137=highlegh user-138=southlon user-139=firstred user-140=costestimatorco user-141=firstrel user-142=clarkass feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 24 09:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:36 nativespace-cdp sudo[1632724]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:37 nativespace-cdp sudo[1632748]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xIJeyML3yr4kHH29.~
Sep 24 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:37 nativespace-cdp sudo[1632761]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xIJeyML3yr4kHH29.~'
Sep 24 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:37 nativespace-cdp sudo[1632764]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xIJeyML3yr4kHH29.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:37 nativespace-cdp sudo[1632769]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:37 nativespace-cdp sudo[1632777]: pam_unix(sudo:session): session closed for user root
Sep 24 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 09:09:44 nativespace-cdp sudo[1632819]: pam_unix(sudo:session): session closed for user root
Sep 24 09:11:36 nativespace-cdp sshd[1633347]: Connection closed by 159.100.136.21 port 36612 [preauth]
Sep 24 09:16:33 nativespace-cdp sshd[1634766]: Connection closed by 159.100.136.21 port 45726 [preauth]
Sep 24 09:21:33 nativespace-cdp sshd[1635949]: Connection closed by 159.100.136.21 port 54818 [preauth]
Sep 24 09:26:33 nativespace-cdp sshd[1637085]: Connection closed by 159.100.136.21 port 36182 [preauth]
Sep 24 09:31:33 nativespace-cdp sshd[1638676]: Connection closed by 159.100.136.21 port 44706 [preauth]
Sep 24 09:36:33 nativespace-cdp sshd[1639861]: Connection closed by 159.100.136.21 port 53764 [preauth]
Sep 24 09:41:35 nativespace-cdp sshd[1640978]: Connection closed by 159.100.136.21 port 34354 [preauth]
Sep 24 09:46:33 nativespace-cdp sshd[1642409]: Connection closed by 159.100.136.21 port 44142 [preauth]
Sep 24 09:51:34 nativespace-cdp sshd[1643722]: Connection closed by 159.100.136.21 port 53672 [preauth]
Sep 24 09:56:33 nativespace-cdp sshd[1644890]: Connection closed by 159.100.136.21 port 34708 [preauth]
Sep 24 10:01:33 nativespace-cdp sshd[1646463]: Connection closed by 159.100.136.21 port 43462 [preauth]
Sep 24 10:06:33 nativespace-cdp sshd[1647834]: Connection closed by 159.100.136.21 port 52672 [preauth]
Sep 24 10:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 10:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:32 nativespace-cdp sudo[1648462]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 10:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:32 nativespace-cdp sudo[1648465]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 10:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:33 nativespace-cdp sudo[1648468]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 10:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:33 nativespace-cdp sudo[1648474]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 10:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:36 nativespace-cdp sudo[1648477]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:36 nativespace-cdp sudo[1648487]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:36 nativespace-cdp sudo[1648490]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:36 nativespace-cdp sudo[1648493]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:36 nativespace-cdp sudo[1648496]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:36 nativespace-cdp sudo[1648499]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:36 nativespace-cdp sudo[1648502]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:38 nativespace-cdp sudo[1648514]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:38 nativespace-cdp sudo[1648519]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=chrisdal user-2=mcdermos user-3=careers user-4=nbhavers user-5=david user-6=tomandle user-7=jennimil user-8=outdoorc user-9=ranxterc user-10=hodgsonmail user-11=branko user-12=romaldki user-13=attlebor user-14=lucy user-15=onlycont user-16=bakery user-17=sosevalu user-18=crrtipdl user-19=nove user-20=boldover user-21=ladburyp user-22=stagingerris user-23=dancinggardener user-24=kategilpin user-25=design user-26=tstardom user-27=oubpgvbx user-28=what user-29=sketchy user-30=cath user-31=havantho user-32=nvihkvu user-33=bwppodcast user-34=zebrapho user-35=steve user-36=asandcoc user-37=sibtoncc user-38=beauty user-39=eatspam user-40=darkstar user-41=dhyana user-42=burydropin user-43=fawcettd user-44=nsceres user-45=isleofwi user-46=smrszyqg user-47=hidden user-48=nomistakes user-49=barbersh
Sep 24 10:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=tigerlet user-51=nscdp user-52=fortunaz user-53=health2045 user-54=foods user-55=leftie user-56=lkpier user-57=philmcph user-58=ctedorgu user-59=donnychicago user-60=firstre5 user-61=steakbridieme user-62=hirefootballgame user-63=eugincou user-64=courseme user-65=cambria1 user-66=cathski user-67=reliable user-68=ninejimm user-69=pugwash user-70=howardon user-71=paulmca1 user-72=cwsocial user-73=firstrel user-74=clarkass user-75=costestimatorco user-76=firstred user-77=southlon user-78=highlegh user-79=jonhartl user-80=seftvta user-81=ultbcrra user-82=firstres user-83=opaiscyx user-84=coursemc user-85=accooper user-86=ianrayne user-87=connectedshoppin user-88=thqkgnbz user-89=gilpin user-90=milloyco user-91=elecleis user-92=hubmaster user-93=carsinyo user-94=fetch user-95=bedfords user-96=belle user-97=ggaaorgu user-98=newstoda user-99=bemadonn user-100=brighto1 user-101=nstriton user-102=firstre2
Sep 24 10:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=vivienn1 user-104=battlere user-105=oneoarco user-106=innovat1 user-107=stuartge user-108=askhform user-109=nativene user-110=alexadmin user-111=skyfirec user-112=ulsukarm user-113=foundation user-114=markward user-115=booff user-116=athenare user-117=connect9 user-118=vantagep user-119=maflemin user-120=lbscrmod user-121=still user-122=agproduc user-123=stephani user-124=leereyn1 user-125=jarvisin user-126=spectrum user-127=hodgesonweb user-128=theblack user-129=wilsonsw user-130=musorguk user-131=megacards user-132=brmrjxl user-133=lakesan1 user-134=strathar user-135=sarafoundation user-136=atestord user-137=lbhyisi user-138=hhdugcor user-139=magichat user-140=martsblo user-141=dickemery123 user-142=ptkxhsbt feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 24 10:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:40 nativespace-cdp sudo[1648524]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 10:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:40 nativespace-cdp sudo[1648538]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vbK3RwP4PZXYVdEe.~
Sep 24 10:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:40 nativespace-cdp sudo[1648541]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vbK3RwP4PZXYVdEe.~'
Sep 24 10:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:40 nativespace-cdp sudo[1648545]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vbK3RwP4PZXYVdEe.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 10:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:40 nativespace-cdp sudo[1648550]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 10:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:40 nativespace-cdp sudo[1648553]: pam_unix(sudo:session): session closed for user root
Sep 24 10:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 10:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 10:09:58 nativespace-cdp sudo[1648603]: pam_unix(sudo:session): session closed for user root
Sep 24 10:11:33 nativespace-cdp sshd[1649080]: Connection closed by 159.100.136.21 port 33992 [preauth]
Sep 24 10:16:33 nativespace-cdp sshd[1650492]: Connection closed by 159.100.136.21 port 42882 [preauth]
Sep 24 10:21:33 nativespace-cdp sshd[1651799]: Connection closed by 159.100.136.21 port 52094 [preauth]
Sep 24 10:26:33 nativespace-cdp sshd[1653020]: Connection closed by 159.100.136.21 port 33266 [preauth]
Sep 24 10:31:33 nativespace-cdp sshd[1654755]: Connection closed by 159.100.136.21 port 42576 [preauth]
Sep 24 10:36:36 nativespace-cdp sshd[1656033]: Connection closed by 159.100.136.21 port 51874 [preauth]
Sep 24 10:41:33 nativespace-cdp sshd[1657081]: Connection closed by 159.100.136.21 port 60882 [preauth]
Sep 24 10:46:33 nativespace-cdp sshd[1658653]: Connection closed by 159.100.136.21 port 41980 [preauth]
Sep 24 10:50:27 nativespace-cdp sshd[1659432]: Invalid user ionadmin from 177.12.2.75 port 45676
Sep 24 10:50:27 nativespace-cdp sshd[1659432]: input_userauth_request: invalid user ionadmin [preauth]
Sep 24 10:50:27 nativespace-cdp sshd[1659432]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 10:50:27 nativespace-cdp sshd[1659432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.12.2.75
Sep 24 10:50:30 nativespace-cdp sshd[1659432]: Failed password for invalid user ionadmin from 177.12.2.75 port 45676 ssh2
Sep 24 10:50:30 nativespace-cdp sshd[1659432]: Received disconnect from 177.12.2.75 port 45676:11: Bye Bye [preauth]
Sep 24 10:50:30 nativespace-cdp sshd[1659432]: Disconnected from 177.12.2.75 port 45676 [preauth]
Sep 24 10:51:08 nativespace-cdp sshd[1659595]: Invalid user sysadmin from 161.132.48.103 port 38300
Sep 24 10:51:08 nativespace-cdp sshd[1659595]: input_userauth_request: invalid user sysadmin [preauth]
Sep 24 10:51:08 nativespace-cdp sshd[1659595]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 10:51:08 nativespace-cdp sshd[1659595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.48.103
Sep 24 10:51:10 nativespace-cdp sshd[1659595]: Failed password for invalid user sysadmin from 161.132.48.103 port 38300 ssh2
Sep 24 10:51:12 nativespace-cdp sshd[1659595]: Received disconnect from 161.132.48.103 port 38300:11: Bye Bye [preauth]
Sep 24 10:51:12 nativespace-cdp sshd[1659595]: Disconnected from 161.132.48.103 port 38300 [preauth]
Sep 24 10:51:33 nativespace-cdp sshd[1659714]: Connection closed by 159.100.136.21 port 51338 [preauth]
Sep 24 10:52:27 nativespace-cdp sshd[1659867]: Invalid user server from 107.173.143.5 port 37748
Sep 24 10:52:27 nativespace-cdp sshd[1659867]: input_userauth_request: invalid user server [preauth]
Sep 24 10:52:27 nativespace-cdp sshd[1659867]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 10:52:27 nativespace-cdp sshd[1659867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.143.5
Sep 24 10:52:29 nativespace-cdp sshd[1659867]: Failed password for invalid user server from 107.173.143.5 port 37748 ssh2
Sep 24 10:52:30 nativespace-cdp sshd[1659867]: Received disconnect from 107.173.143.5 port 37748:11: Bye Bye [preauth]
Sep 24 10:52:30 nativespace-cdp sshd[1659867]: Disconnected from 107.173.143.5 port 37748 [preauth]
Sep 24 10:53:44 nativespace-cdp sshd[1660186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.48.103  user=root
Sep 24 10:53:44 nativespace-cdp sshd[1660186]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 10:53:46 nativespace-cdp sshd[1660186]: Failed password for root from 161.132.48.103 port 37926 ssh2
Sep 24 10:53:48 nativespace-cdp sshd[1660186]: Received disconnect from 161.132.48.103 port 37926:11: Bye Bye [preauth]
Sep 24 10:53:48 nativespace-cdp sshd[1660186]: Disconnected from 161.132.48.103 port 37926 [preauth]
Sep 24 10:53:49 nativespace-cdp sshd[1660190]: Invalid user postgres from 177.12.2.75 port 41226
Sep 24 10:53:49 nativespace-cdp sshd[1660190]: input_userauth_request: invalid user postgres [preauth]
Sep 24 10:53:49 nativespace-cdp sshd[1660190]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 10:53:49 nativespace-cdp sshd[1660190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.12.2.75
Sep 24 10:53:50 nativespace-cdp sshd[1660190]: Failed password for invalid user postgres from 177.12.2.75 port 41226 ssh2
Sep 24 10:53:51 nativespace-cdp sshd[1660190]: Received disconnect from 177.12.2.75 port 41226:11: Bye Bye [preauth]
Sep 24 10:53:51 nativespace-cdp sshd[1660190]: Disconnected from 177.12.2.75 port 41226 [preauth]
Sep 24 10:54:14 nativespace-cdp sshd[1660262]: Invalid user sammy from 107.173.143.5 port 51218
Sep 24 10:54:14 nativespace-cdp sshd[1660262]: input_userauth_request: invalid user sammy [preauth]
Sep 24 10:54:14 nativespace-cdp sshd[1660262]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 10:54:14 nativespace-cdp sshd[1660262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.143.5
Sep 24 10:54:16 nativespace-cdp sshd[1660262]: Failed password for invalid user sammy from 107.173.143.5 port 51218 ssh2
Sep 24 10:54:16 nativespace-cdp sshd[1660262]: Received disconnect from 107.173.143.5 port 51218:11: Bye Bye [preauth]
Sep 24 10:54:16 nativespace-cdp sshd[1660262]: Disconnected from 107.173.143.5 port 51218 [preauth]
Sep 24 10:54:16 nativespace-cdp sshd[1660262]: Failed password for invalid user sammy from 107.173.143.5 port 51218 ssh2
Sep 24 10:54:16 nativespace-cdp sshd[1660262]: Received disconnect from 107.173.143.5 port 51218:11: Bye Bye [preauth]
Sep 24 10:54:16 nativespace-cdp sshd[1660262]: Disconnected from 107.173.143.5 port 51218 [preauth]
Sep 24 10:54:29 nativespace-cdp sshd[1660452]: Invalid user azureuser from 161.132.48.103 port 50696
Sep 24 10:54:29 nativespace-cdp sshd[1660452]: input_userauth_request: invalid user azureuser [preauth]
Sep 24 10:54:29 nativespace-cdp sshd[1660452]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 10:54:29 nativespace-cdp sshd[1660452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.48.103
Sep 24 10:54:31 nativespace-cdp sshd[1660452]: Failed password for invalid user azureuser from 161.132.48.103 port 50696 ssh2
Sep 24 10:54:36 nativespace-cdp sshd[1660452]: Received disconnect from 161.132.48.103 port 50696:11: Bye Bye [preauth]
Sep 24 10:54:36 nativespace-cdp sshd[1660452]: Disconnected from 161.132.48.103 port 50696 [preauth]
Sep 24 10:54:40 nativespace-cdp sshd[1660519]: Invalid user iptv from 177.12.2.75 port 52758
Sep 24 10:54:40 nativespace-cdp sshd[1660519]: input_userauth_request: invalid user iptv [preauth]
Sep 24 10:54:40 nativespace-cdp sshd[1660519]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 10:54:40 nativespace-cdp sshd[1660519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.12.2.75
Sep 24 10:54:41 nativespace-cdp sshd[1660519]: Failed password for invalid user iptv from 177.12.2.75 port 52758 ssh2
Sep 24 10:54:42 nativespace-cdp sshd[1660519]: Received disconnect from 177.12.2.75 port 52758:11: Bye Bye [preauth]
Sep 24 10:54:42 nativespace-cdp sshd[1660519]: Disconnected from 177.12.2.75 port 52758 [preauth]
Sep 24 10:56:33 nativespace-cdp sshd[1661043]: Connection closed by 159.100.136.21 port 60848 [preauth]
Sep 24 11:01:33 nativespace-cdp sshd[1662716]: Connection closed by 159.100.136.21 port 41356 [preauth]
Sep 24 11:06:33 nativespace-cdp sshd[1663881]: Connection closed by 159.100.136.21 port 50568 [preauth]
Sep 24 11:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 11:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:29 nativespace-cdp sudo[1664714]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 11:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:29 nativespace-cdp sudo[1664717]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 11:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:30 nativespace-cdp sudo[1664720]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:30 nativespace-cdp sudo[1664725]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:34 nativespace-cdp sudo[1664728]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:34 nativespace-cdp sudo[1664741]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:34 nativespace-cdp sudo[1664744]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:34 nativespace-cdp sudo[1664747]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:34 nativespace-cdp sudo[1664750]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:34 nativespace-cdp sudo[1664753]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:34 nativespace-cdp sudo[1664756]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 11:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:36 nativespace-cdp sudo[1664769]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 11:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:36 nativespace-cdp sudo[1664776]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=david user-2=nbhavers user-3=careers user-4=mcdermos user-5=chrisdal user-6=jennimil user-7=tomandle user-8=romaldki user-9=branko user-10=hodgsonmail user-11=outdoorc user-12=ranxterc user-13=onlycont user-14=lucy user-15=attlebor user-16=crrtipdl user-17=sosevalu user-18=bakery user-19=boldover user-20=nove user-21=design user-22=kategilpin user-23=stagingerris user-24=dancinggardener user-25=ladburyp user-26=nvihkvu user-27=havantho user-28=cath user-29=sketchy user-30=what user-31=oubpgvbx user-32=tstardom user-33=steve user-34=zebrapho user-35=bwppodcast user-36=asandcoc user-37=sibtoncc user-38=dhyana user-39=darkstar user-40=eatspam user-41=beauty user-42=nsceres user-43=fawcettd user-44=burydropin user-45=tigerlet user-46=barbersh user-47=nomistakes user-48=hidden user-49=smrszyqg
Sep 24 11:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=isleofwi user-51=donnychicago user-52=firstre5 user-53=steakbridieme user-54=philmcph user-55=ctedorgu user-56=lkpier user-57=leftie user-58=foods user-59=fortunaz user-60=health2045 user-61=nscdp user-62=courseme user-63=eugincou user-64=hirefootballgame user-65=cwsocial user-66=howardon user-67=paulmca1 user-68=pugwash user-69=reliable user-70=ninejimm user-71=cambria1 user-72=cathski user-73=highlegh user-74=southlon user-75=firstred user-76=costestimatorco user-77=clarkass user-78=firstrel user-79=coursemc user-80=opaiscyx user-81=firstres user-82=ultbcrra user-83=jonhartl user-84=seftvta user-85=thqkgnbz user-86=connectedshoppin user-87=ianrayne user-88=accooper user-89=fetch user-90=carsinyo user-91=hubmaster user-92=elecleis user-93=milloyco user-94=gilpin user-95=bemadonn user-96=newstoda user-97=ggaaorgu user-98=belle user-99=bedfords user-100=oneoarco user-101=battlere user-102=vivienn1
Sep 24 11:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstre2 user-104=nstriton user-105=brighto1 user-106=nativene user-107=askhform user-108=stuartge user-109=innovat1 user-110=alexadmin user-111=skyfirec user-112=ulsukarm user-113=lbscrmod user-114=maflemin user-115=vantagep user-116=athenare user-117=connect9 user-118=markward user-119=foundation user-120=booff user-121=leereyn1 user-122=stephani user-123=agproduc user-124=still user-125=hodgesonweb user-126=theblack user-127=spectrum user-128=jarvisin user-129=megacards user-130=musorguk user-131=wilsonsw user-132=atestord user-133=sarafoundation user-134=strathar user-135=brmrjxl user-136=lakesan1 user-137=magichat user-138=hhdugcor user-139=lbhyisi user-140=ptkxhsbt user-141=dickemery123 user-142=martsblo feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 24 11:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 24 11:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:38 nativespace-cdp sudo[1664781]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 24 11:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:40 nativespace-cdp sudo[1664800]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 24 11:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 24 11:09:40 nativespace-cdp sudo[1664805]: pam_unix(sudo:session): session closed for user onlycont
Sep 24 11:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 24 11:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:41 nativespace-cdp sudo[1664816]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 24 11:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 11:09:41 nativespace-cdp sudo[1664822]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 11:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 24 11:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:43 nativespace-cdp sudo[1664845]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 24 11:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 24 11:09:43 nativespace-cdp sudo[1664850]: pam_unix(sudo:session): session closed for user lkpier
Sep 24 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 24 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:44 nativespace-cdp sudo[1664868]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 24 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 24 11:09:44 nativespace-cdp sudo[1664876]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 24 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 24 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 24 11:09:44 nativespace-cdp sudo[1664887]: pam_unix(sudo:session): session closed for user oneoarco
Sep 24 11:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 24 11:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:45 nativespace-cdp sudo[1664898]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 24 11:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 24 11:09:45 nativespace-cdp sudo[1664905]: pam_unix(sudo:session): session closed for user fortunaz
Sep 24 11:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 24 11:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:45 nativespace-cdp sudo[1664916]: pam_unix(sudo:session): session closed for user root
Sep 24 11:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 11:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:09:46 nativespace-cdp sudo[1664919]: pam_unix(sudo:session): session closed for user root
Sep 24 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 24 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:10:03 nativespace-cdp sudo[1665984]: pam_unix(sudo:session): session closed for user root
Sep 24 11:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 24 11:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:10:03 nativespace-cdp sudo[1665989]: pam_unix(sudo:session): session closed for user root
Sep 24 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:10:04 nativespace-cdp sudo[1666004]: pam_unix(sudo:session): session closed for user root
Sep 24 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-h1Crnm7gvkoOjA9Y.~
Sep 24 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:10:04 nativespace-cdp sudo[1666008]: pam_unix(sudo:session): session closed for user root
Sep 24 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-h1Crnm7gvkoOjA9Y.~'
Sep 24 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:10:04 nativespace-cdp sudo[1666011]: pam_unix(sudo:session): session closed for user root
Sep 24 11:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-h1Crnm7gvkoOjA9Y.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 24 11:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:10:05 nativespace-cdp sudo[1666016]: pam_unix(sudo:session): session closed for user root
Sep 24 11:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 24 11:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:10:05 nativespace-cdp sudo[1666019]: pam_unix(sudo:session): session closed for user root
Sep 24 11:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 24 11:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 11:10:20 nativespace-cdp sudo[1666127]: pam_unix(sudo:session): session closed for user root
Sep 24 11:11:33 nativespace-cdp sshd[1666351]: Connection closed by 159.100.136.21 port 58840 [preauth]
Sep 24 11:16:33 nativespace-cdp sshd[1667725]: Connection closed by 159.100.136.21 port 40124 [preauth]
Sep 24 11:21:37 nativespace-cdp sshd[1669258]: Did not receive identification string from 159.100.136.21 port 49120
Sep 24 11:26:34 nativespace-cdp sshd[1670381]: Connection closed by 159.100.136.21 port 58062 [preauth]
Sep 24 11:31:34 nativespace-cdp sshd[1671949]: Connection closed by 159.100.136.21 port 38778 [preauth]
Sep 24 11:36:33 nativespace-cdp sshd[1672988]: Connection closed by 159.100.136.21 port 48518 [preauth]
Sep 24 11:41:33 nativespace-cdp sshd[1674215]: Connection closed by 159.100.136.21 port 57450 [preauth]
Sep 24 11:46:35 nativespace-cdp sshd[1675829]: Connection closed by 159.100.136.21 port 39172 [preauth]
Sep 24 11:51:33 nativespace-cdp sshd[1677000]: Connection closed by 159.100.136.21 port 48348 [preauth]
Sep 24 11:56:33 nativespace-cdp sshd[1677965]: Connection closed by 159.100.136.21 port 58152 [preauth]
Sep 24 12:01:33 nativespace-cdp sshd[1679497]: Connection closed by 159.100.136.21 port 38848 [preauth]
Sep 24 12:06:36 nativespace-cdp sshd[1680658]: Connection closed by 159.100.136.21 port 48780 [preauth]
Sep 24 12:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 24 12:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:17 nativespace-cdp sudo[1681178]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 24 12:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:17 nativespace-cdp sudo[1681182]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 24 12:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:19 nativespace-cdp sudo[1681185]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 24 12:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:19 nativespace-cdp sudo[1681193]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 24 12:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:21 nativespace-cdp sudo[1681196]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 24 12:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:21 nativespace-cdp sudo[1681205]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 24 12:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:21 nativespace-cdp sudo[1681208]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 24 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:22 nativespace-cdp sudo[1681211]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 24 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:22 nativespace-cdp sudo[1681214]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 24 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:22 nativespace-cdp sudo[1681217]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 24 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:22 nativespace-cdp sudo[1681220]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 12:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:09:24 nativespace-cdp sudo[1681231]: pam_unix(sudo:session): session closed for user root
Sep 24 12:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 24 12:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 12:11:33 nativespace-cdp sshd[1681830]: Connection closed by 159.100.136.21 port 57556 [preauth]
Sep 24 12:16:33 nativespace-cdp sshd[1683243]: Connection closed by 159.100.136.21 port 39058 [preauth]
Sep 24 12:21:36 nativespace-cdp sshd[1684304]: Connection closed by 159.100.136.21 port 48256 [preauth]
Sep 24 12:26:36 nativespace-cdp sshd[1685425]: Connection closed by 159.100.136.21 port 58050 [preauth]
Sep 24 12:31:33 nativespace-cdp sshd[1686806]: Connection closed by 159.100.136.21 port 39036 [preauth]
Sep 24 12:35:44 nativespace-cdp sshd[1687754]: Invalid user ubuntu from 60.54.218.252 port 36888
Sep 24 12:35:44 nativespace-cdp sshd[1687754]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 12:35:45 nativespace-cdp sshd[1687754]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 12:35:45 nativespace-cdp sshd[1687754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.54.218.252
Sep 24 12:35:46 nativespace-cdp sshd[1687754]: Failed password for invalid user ubuntu from 60.54.218.252 port 36888 ssh2
Sep 24 12:35:46 nativespace-cdp sshd[1687754]: Received disconnect from 60.54.218.252 port 36888:11: Bye Bye [preauth]
Sep 24 12:35:46 nativespace-cdp sshd[1687754]: Disconnected from 60.54.218.252 port 36888 [preauth]
Sep 24 12:36:13 nativespace-cdp sshd[1687860]: Invalid user test01 from 156.253.5.48 port 46360
Sep 24 12:36:13 nativespace-cdp sshd[1687860]: input_userauth_request: invalid user test01 [preauth]
Sep 24 12:36:13 nativespace-cdp sshd[1687860]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 12:36:13 nativespace-cdp sshd[1687860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.253.5.48
Sep 24 12:36:15 nativespace-cdp sshd[1687860]: Failed password for invalid user test01 from 156.253.5.48 port 46360 ssh2
Sep 24 12:36:15 nativespace-cdp sshd[1687860]: Received disconnect from 156.253.5.48 port 46360:11: Bye Bye [preauth]
Sep 24 12:36:15 nativespace-cdp sshd[1687860]: Disconnected from 156.253.5.48 port 46360 [preauth]
Sep 24 12:36:35 nativespace-cdp sshd[1687937]: Connection closed by 159.100.136.21 port 48342 [preauth]
Sep 24 12:40:49 nativespace-cdp sshd[1688940]: Invalid user odoo from 156.253.5.48 port 46606
Sep 24 12:40:49 nativespace-cdp sshd[1688940]: input_userauth_request: invalid user odoo [preauth]
Sep 24 12:40:49 nativespace-cdp sshd[1688940]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 12:40:49 nativespace-cdp sshd[1688940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.253.5.48
Sep 24 12:40:51 nativespace-cdp sshd[1688940]: Failed password for invalid user odoo from 156.253.5.48 port 46606 ssh2
Sep 24 12:40:51 nativespace-cdp sshd[1688940]: Received disconnect from 156.253.5.48 port 46606:11: Bye Bye [preauth]
Sep 24 12:40:51 nativespace-cdp sshd[1688940]: Disconnected from 156.253.5.48 port 46606 [preauth]
Sep 24 12:41:17 nativespace-cdp sshd[1689037]: Invalid user tomcat from 60.54.218.252 port 34092
Sep 24 12:41:17 nativespace-cdp sshd[1689037]: input_userauth_request: invalid user tomcat [preauth]
Sep 24 12:41:17 nativespace-cdp sshd[1689037]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 12:41:17 nativespace-cdp sshd[1689037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.54.218.252
Sep 24 12:41:19 nativespace-cdp sshd[1689037]: Failed password for invalid user tomcat from 60.54.218.252 port 34092 ssh2
Sep 24 12:41:19 nativespace-cdp sshd[1689037]: Received disconnect from 60.54.218.252 port 34092:11: Bye Bye [preauth]
Sep 24 12:41:19 nativespace-cdp sshd[1689037]: Disconnected from 60.54.218.252 port 34092 [preauth]
Sep 24 12:41:30 nativespace-cdp sshd[1689082]: Invalid user tg from 156.253.5.48 port 46688
Sep 24 12:41:30 nativespace-cdp sshd[1689082]: input_userauth_request: invalid user tg [preauth]
Sep 24 12:41:30 nativespace-cdp sshd[1689082]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 12:41:30 nativespace-cdp sshd[1689082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.253.5.48
Sep 24 12:41:33 nativespace-cdp sshd[1689082]: Failed password for invalid user tg from 156.253.5.48 port 46688 ssh2
Sep 24 12:41:33 nativespace-cdp sshd[1689082]: Received disconnect from 156.253.5.48 port 46688:11: Bye Bye [preauth]
Sep 24 12:41:33 nativespace-cdp sshd[1689082]: Disconnected from 156.253.5.48 port 46688 [preauth]
Sep 24 12:41:33 nativespace-cdp sshd[1689088]: Connection closed by 159.100.136.21 port 58120 [preauth]
Sep 24 12:42:19 nativespace-cdp sshd[1689202]: Connection closed by 60.54.218.252 port 47096 [preauth]
Sep 24 12:42:50 nativespace-cdp sshd[1689381]: Invalid user tg from 60.54.218.252 port 60100
Sep 24 12:42:50 nativespace-cdp sshd[1689381]: input_userauth_request: invalid user tg [preauth]
Sep 24 12:42:50 nativespace-cdp sshd[1689381]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 12:42:50 nativespace-cdp sshd[1689381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.54.218.252
Sep 24 12:42:52 nativespace-cdp sshd[1689381]: Failed password for invalid user tg from 60.54.218.252 port 60100 ssh2
Sep 24 12:42:52 nativespace-cdp sshd[1689381]: Received disconnect from 60.54.218.252 port 60100:11: Bye Bye [preauth]
Sep 24 12:42:52 nativespace-cdp sshd[1689381]: Disconnected from 60.54.218.252 port 60100 [preauth]
Sep 24 12:46:41 nativespace-cdp sshd[1690806]: Did not receive identification string from 159.100.136.21 port 39600
Sep 24 12:50:40 nativespace-cdp crond[1690915]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 24 12:50:40 nativespace-cdp crond[1690964]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 24 12:50:40 nativespace-cdp crond[1691052]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 24 12:50:40 nativespace-cdp crond[1690963]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 24 12:50:40 nativespace-cdp crond[1690916]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 24 12:50:40 nativespace-cdp crond[1691051]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 24 12:51:34 nativespace-cdp sshd[1691623]: Connection closed by 159.100.136.21 port 48764 [preauth]
Sep 24 12:56:33 nativespace-cdp sshd[1692745]: Connection closed by 159.100.136.21 port 58182 [preauth]
Sep 24 13:01:36 nativespace-cdp sshd[1694394]: Connection closed by 159.100.136.21 port 39310 [preauth]
Sep 24 13:06:33 nativespace-cdp sshd[1695495]: Connection closed by 159.100.136.21 port 48812 [preauth]
Sep 24 13:11:33 nativespace-cdp sshd[1696717]: Connection closed by 159.100.136.21 port 57764 [preauth]
Sep 24 13:16:33 nativespace-cdp sshd[1698167]: Connection closed by 159.100.136.21 port 39534 [preauth]
Sep 24 13:21:33 nativespace-cdp sshd[1699465]: Connection closed by 159.100.136.21 port 48970 [preauth]
Sep 24 13:26:33 nativespace-cdp sshd[1700775]: Connection closed by 159.100.136.21 port 58596 [preauth]
Sep 24 13:31:33 nativespace-cdp sshd[1702205]: Connection closed by 159.100.136.21 port 40150 [preauth]
Sep 24 13:36:33 nativespace-cdp sshd[1703400]: Connection closed by 159.100.136.21 port 50038 [preauth]
Sep 24 13:41:33 nativespace-cdp sshd[1704594]: Connection closed by 159.100.136.21 port 59702 [preauth]
Sep 24 13:46:35 nativespace-cdp sshd[1705970]: Connection closed by 159.100.136.21 port 41540 [preauth]
Sep 24 13:51:36 nativespace-cdp sshd[1707050]: Connection closed by 159.100.136.21 port 51204 [preauth]
Sep 24 13:56:34 nativespace-cdp sshd[1708054]: Connection closed by 159.100.136.21 port 32994 [preauth]
Sep 24 14:01:36 nativespace-cdp sshd[1709529]: Connection closed by 159.100.136.21 port 42618 [preauth]
Sep 24 14:06:37 nativespace-cdp sshd[1710894]: Connection closed by 159.100.136.21 port 52390 [preauth]
Sep 24 14:11:35 nativespace-cdp sshd[1712138]: Connection closed by 159.100.136.21 port 33844 [preauth]
Sep 24 14:16:34 nativespace-cdp sshd[1713513]: Connection closed by 159.100.136.21 port 43618 [preauth]
Sep 24 14:21:35 nativespace-cdp sshd[1714538]: Connection closed by 159.100.136.21 port 53242 [preauth]
Sep 24 14:26:33 nativespace-cdp sshd[1715555]: Connection closed by 159.100.136.21 port 34824 [preauth]
Sep 24 14:31:33 nativespace-cdp sshd[1716914]: Connection closed by 159.100.136.21 port 44528 [preauth]
Sep 24 14:36:33 nativespace-cdp sshd[1718093]: Connection closed by 159.100.136.21 port 53804 [preauth]
Sep 24 14:41:34 nativespace-cdp sshd[1719276]: Connection closed by 159.100.136.21 port 35092 [preauth]
Sep 24 14:46:33 nativespace-cdp sshd[1720739]: Connection closed by 159.100.136.21 port 44932 [preauth]
Sep 24 14:51:33 nativespace-cdp sshd[1722012]: Connection closed by 159.100.136.21 port 54076 [preauth]
Sep 24 14:56:34 nativespace-cdp sshd[1723085]: Connection closed by 159.100.136.21 port 35276 [preauth]
Sep 24 15:01:33 nativespace-cdp sshd[1724527]: Connection closed by 159.100.136.21 port 44608 [preauth]
Sep 24 15:04:28 nativespace-cdp sshd[1725202]: Invalid user steam from 187.49.152.12 port 36306
Sep 24 15:04:28 nativespace-cdp sshd[1725202]: input_userauth_request: invalid user steam [preauth]
Sep 24 15:04:28 nativespace-cdp sshd[1725202]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:04:28 nativespace-cdp sshd[1725202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.49.152.12
Sep 24 15:04:30 nativespace-cdp sshd[1725202]: Failed password for invalid user steam from 187.49.152.12 port 36306 ssh2
Sep 24 15:04:30 nativespace-cdp sshd[1725202]: Received disconnect from 187.49.152.12 port 36306:11: Bye Bye [preauth]
Sep 24 15:04:30 nativespace-cdp sshd[1725202]: Disconnected from 187.49.152.12 port 36306 [preauth]
Sep 24 15:04:36 nativespace-cdp sshd[1725223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.197.163  user=root
Sep 24 15:04:36 nativespace-cdp sshd[1725223]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 15:04:38 nativespace-cdp sshd[1725223]: Failed password for root from 1.214.197.163 port 34316 ssh2
Sep 24 15:04:38 nativespace-cdp sshd[1725223]: Received disconnect from 1.214.197.163 port 34316:11: Bye Bye [preauth]
Sep 24 15:04:38 nativespace-cdp sshd[1725223]: Disconnected from 1.214.197.163 port 34316 [preauth]
Sep 24 15:06:33 nativespace-cdp sshd[1725787]: Connection closed by 159.100.136.21 port 54368 [preauth]
Sep 24 15:06:34 nativespace-cdp sshd[1725790]: Invalid user abhishek from 14.225.231.149 port 46838
Sep 24 15:06:34 nativespace-cdp sshd[1725790]: input_userauth_request: invalid user abhishek [preauth]
Sep 24 15:06:34 nativespace-cdp sshd[1725790]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:06:34 nativespace-cdp sshd[1725790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.231.149
Sep 24 15:06:36 nativespace-cdp sshd[1725790]: Failed password for invalid user abhishek from 14.225.231.149 port 46838 ssh2
Sep 24 15:06:36 nativespace-cdp sshd[1725790]: Received disconnect from 14.225.231.149 port 46838:11: Bye Bye [preauth]
Sep 24 15:06:36 nativespace-cdp sshd[1725790]: Disconnected from 14.225.231.149 port 46838 [preauth]
Sep 24 15:07:28 nativespace-cdp sshd[1725938]: Invalid user support from 103.26.136.40 port 54258
Sep 24 15:07:28 nativespace-cdp sshd[1725938]: input_userauth_request: invalid user support [preauth]
Sep 24 15:07:28 nativespace-cdp sshd[1725938]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:07:28 nativespace-cdp sshd[1725938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.136.40
Sep 24 15:07:30 nativespace-cdp sshd[1725938]: Failed password for invalid user support from 103.26.136.40 port 54258 ssh2
Sep 24 15:07:30 nativespace-cdp sshd[1725938]: Received disconnect from 103.26.136.40 port 54258:11: Bye Bye [preauth]
Sep 24 15:07:30 nativespace-cdp sshd[1725938]: Disconnected from 103.26.136.40 port 54258 [preauth]
Sep 24 15:09:59 nativespace-cdp sshd[1726434]: Invalid user tomcat from 1.214.197.163 port 58690
Sep 24 15:09:59 nativespace-cdp sshd[1726434]: input_userauth_request: invalid user tomcat [preauth]
Sep 24 15:09:59 nativespace-cdp sshd[1726434]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:09:59 nativespace-cdp sshd[1726434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.197.163
Sep 24 15:10:02 nativespace-cdp sshd[1726434]: Failed password for invalid user tomcat from 1.214.197.163 port 58690 ssh2
Sep 24 15:10:05 nativespace-cdp sshd[1726434]: Received disconnect from 1.214.197.163 port 58690:11: Bye Bye [preauth]
Sep 24 15:10:05 nativespace-cdp sshd[1726434]: Disconnected from 1.214.197.163 port 58690 [preauth]
Sep 24 15:10:12 nativespace-cdp sshd[1726588]: Invalid user svn from 187.49.152.12 port 33476
Sep 24 15:10:12 nativespace-cdp sshd[1726588]: input_userauth_request: invalid user svn [preauth]
Sep 24 15:10:12 nativespace-cdp sshd[1726588]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:10:12 nativespace-cdp sshd[1726588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.49.152.12
Sep 24 15:10:13 nativespace-cdp sshd[1726588]: Failed password for invalid user svn from 187.49.152.12 port 33476 ssh2
Sep 24 15:10:17 nativespace-cdp sshd[1726588]: Received disconnect from 187.49.152.12 port 33476:11: Bye Bye [preauth]
Sep 24 15:10:17 nativespace-cdp sshd[1726588]: Disconnected from 187.49.152.12 port 33476 [preauth]
Sep 24 15:10:23 nativespace-cdp sshd[1726623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.231.149  user=root
Sep 24 15:10:23 nativespace-cdp sshd[1726623]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 15:10:25 nativespace-cdp sshd[1726623]: Failed password for root from 14.225.231.149 port 57412 ssh2
Sep 24 15:10:25 nativespace-cdp sshd[1726623]: Received disconnect from 14.225.231.149 port 57412:11: Bye Bye [preauth]
Sep 24 15:10:25 nativespace-cdp sshd[1726623]: Disconnected from 14.225.231.149 port 57412 [preauth]
Sep 24 15:10:35 nativespace-cdp sshd[1726697]: Invalid user test from 103.26.136.40 port 41774
Sep 24 15:10:35 nativespace-cdp sshd[1726697]: input_userauth_request: invalid user test [preauth]
Sep 24 15:10:35 nativespace-cdp sshd[1726697]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:10:35 nativespace-cdp sshd[1726697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.136.40
Sep 24 15:10:37 nativespace-cdp sshd[1726697]: Failed password for invalid user test from 103.26.136.40 port 41774 ssh2
Sep 24 15:10:37 nativespace-cdp sshd[1726697]: Received disconnect from 103.26.136.40 port 41774:11: Bye Bye [preauth]
Sep 24 15:10:37 nativespace-cdp sshd[1726697]: Disconnected from 103.26.136.40 port 41774 [preauth]
Sep 24 15:10:51 nativespace-cdp sshd[1726793]: Invalid user nexus from 1.214.197.163 port 44834
Sep 24 15:10:51 nativespace-cdp sshd[1726793]: input_userauth_request: invalid user nexus [preauth]
Sep 24 15:10:51 nativespace-cdp sshd[1726793]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:10:51 nativespace-cdp sshd[1726793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.197.163
Sep 24 15:10:52 nativespace-cdp sshd[1726793]: Failed password for invalid user nexus from 1.214.197.163 port 44834 ssh2
Sep 24 15:10:52 nativespace-cdp sshd[1726793]: Received disconnect from 1.214.197.163 port 44834:11: Bye Bye [preauth]
Sep 24 15:10:52 nativespace-cdp sshd[1726793]: Disconnected from 1.214.197.163 port 44834 [preauth]
Sep 24 15:11:05 nativespace-cdp sshd[1726851]: Invalid user usuario from 187.49.152.12 port 46242
Sep 24 15:11:05 nativespace-cdp sshd[1726851]: input_userauth_request: invalid user usuario [preauth]
Sep 24 15:11:05 nativespace-cdp sshd[1726851]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:11:05 nativespace-cdp sshd[1726851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.49.152.12
Sep 24 15:11:08 nativespace-cdp sshd[1726851]: Failed password for invalid user usuario from 187.49.152.12 port 46242 ssh2
Sep 24 15:11:08 nativespace-cdp sshd[1726851]: Received disconnect from 187.49.152.12 port 46242:11: Bye Bye [preauth]
Sep 24 15:11:08 nativespace-cdp sshd[1726851]: Disconnected from 187.49.152.12 port 46242 [preauth]
Sep 24 15:11:20 nativespace-cdp sshd[1726963]: Invalid user ubuntu from 14.225.231.149 port 43868
Sep 24 15:11:20 nativespace-cdp sshd[1726963]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 15:11:20 nativespace-cdp sshd[1726963]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:11:20 nativespace-cdp sshd[1726963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.231.149
Sep 24 15:11:22 nativespace-cdp sshd[1726963]: Failed password for invalid user ubuntu from 14.225.231.149 port 43868 ssh2
Sep 24 15:11:22 nativespace-cdp sshd[1726963]: Received disconnect from 14.225.231.149 port 43868:11: Bye Bye [preauth]
Sep 24 15:11:22 nativespace-cdp sshd[1726963]: Disconnected from 14.225.231.149 port 43868 [preauth]
Sep 24 15:11:26 nativespace-cdp sshd[1727016]: Invalid user ubuntu from 103.26.136.40 port 48260
Sep 24 15:11:26 nativespace-cdp sshd[1727016]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 15:11:26 nativespace-cdp sshd[1727016]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 15:11:26 nativespace-cdp sshd[1727016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.136.40
Sep 24 15:11:28 nativespace-cdp sshd[1727016]: Failed password for invalid user ubuntu from 103.26.136.40 port 48260 ssh2
Sep 24 15:11:33 nativespace-cdp sshd[1727120]: Connection closed by 159.100.136.21 port 35396 [preauth]
Sep 24 15:16:35 nativespace-cdp sshd[1728611]: Connection closed by 159.100.136.21 port 44994 [preauth]
Sep 24 15:21:33 nativespace-cdp sshd[1729864]: Connection closed by 159.100.136.21 port 54440 [preauth]
Sep 24 15:26:34 nativespace-cdp sshd[1730938]: Connection closed by 159.100.136.21 port 35760 [preauth]
Sep 24 15:31:33 nativespace-cdp sshd[1732514]: Connection closed by 159.100.136.21 port 44674 [preauth]
Sep 24 15:36:34 nativespace-cdp sshd[1733782]: Connection closed by 159.100.136.21 port 54224 [preauth]
Sep 24 15:41:34 nativespace-cdp sshd[1734820]: Connection closed by 159.100.136.21 port 35212 [preauth]
Sep 24 15:46:33 nativespace-cdp sshd[1736224]: Connection closed by 159.100.136.21 port 44496 [preauth]
Sep 24 15:51:36 nativespace-cdp sshd[1741997]: Connection closed by 159.100.136.21 port 54034 [preauth]
Sep 24 15:56:33 nativespace-cdp sshd[1744028]: Connection closed by 159.100.136.21 port 35398 [preauth]
Sep 24 16:01:33 nativespace-cdp sshd[1745539]: Connection closed by 159.100.136.21 port 44310 [preauth]
Sep 24 16:06:33 nativespace-cdp sshd[1746937]: Connection closed by 159.100.136.21 port 53622 [preauth]
Sep 24 16:11:33 nativespace-cdp sshd[1748139]: Connection closed by 159.100.136.21 port 34008 [preauth]
Sep 24 16:16:33 nativespace-cdp sshd[1749748]: Connection closed by 159.100.136.21 port 42946 [preauth]
Sep 24 16:21:33 nativespace-cdp sshd[1751006]: Connection closed by 159.100.136.21 port 52012 [preauth]
Sep 24 16:26:33 nativespace-cdp sshd[1752342]: Connection closed by 159.100.136.21 port 33160 [preauth]
Sep 24 16:27:01 nativespace-cdp sshd[1752432]: Invalid user support from 27.254.235.1 port 55514
Sep 24 16:27:01 nativespace-cdp sshd[1752432]: input_userauth_request: invalid user support [preauth]
Sep 24 16:27:01 nativespace-cdp sshd[1752432]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:27:01 nativespace-cdp sshd[1752432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.235.1
Sep 24 16:27:03 nativespace-cdp sshd[1752432]: Failed password for invalid user support from 27.254.235.1 port 55514 ssh2
Sep 24 16:27:03 nativespace-cdp sshd[1752432]: Received disconnect from 27.254.235.1 port 55514:11: Bye Bye [preauth]
Sep 24 16:27:03 nativespace-cdp sshd[1752432]: Disconnected from 27.254.235.1 port 55514 [preauth]
Sep 24 16:27:44 nativespace-cdp sshd[1752571]: Invalid user test_user from 47.243.33.161 port 44548
Sep 24 16:27:44 nativespace-cdp sshd[1752571]: input_userauth_request: invalid user test_user [preauth]
Sep 24 16:27:44 nativespace-cdp sshd[1752571]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:27:44 nativespace-cdp sshd[1752571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.243.33.161
Sep 24 16:27:46 nativespace-cdp sshd[1752571]: Failed password for invalid user test_user from 47.243.33.161 port 44548 ssh2
Sep 24 16:27:49 nativespace-cdp sshd[1752571]: Received disconnect from 47.243.33.161 port 44548:11: Bye Bye [preauth]
Sep 24 16:27:49 nativespace-cdp sshd[1752571]: Disconnected from 47.243.33.161 port 44548 [preauth]
Sep 24 16:28:04 nativespace-cdp sshd[1752648]: Invalid user ubuntu from 46.226.162.44 port 45656
Sep 24 16:28:04 nativespace-cdp sshd[1752648]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 16:28:04 nativespace-cdp sshd[1752648]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:28:04 nativespace-cdp sshd[1752648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.226.162.44
Sep 24 16:28:06 nativespace-cdp sshd[1752648]: Failed password for invalid user ubuntu from 46.226.162.44 port 45656 ssh2
Sep 24 16:28:06 nativespace-cdp sshd[1752648]: Received disconnect from 46.226.162.44 port 45656:11: Bye Bye [preauth]
Sep 24 16:28:06 nativespace-cdp sshd[1752648]: Disconnected from 46.226.162.44 port 45656 [preauth]
Sep 24 16:30:46 nativespace-cdp sshd[1753546]: Invalid user user from 212.227.85.49 port 42396
Sep 24 16:30:46 nativespace-cdp sshd[1753546]: input_userauth_request: invalid user user [preauth]
Sep 24 16:30:46 nativespace-cdp sshd[1753546]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:30:46 nativespace-cdp sshd[1753546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.227.85.49
Sep 24 16:30:49 nativespace-cdp sshd[1753546]: Failed password for invalid user user from 212.227.85.49 port 42396 ssh2
Sep 24 16:30:49 nativespace-cdp sshd[1753546]: Received disconnect from 212.227.85.49 port 42396:11: Bye Bye [preauth]
Sep 24 16:30:49 nativespace-cdp sshd[1753546]: Disconnected from 212.227.85.49 port 42396 [preauth]
Sep 24 16:31:33 nativespace-cdp sshd[1753842]: Connection closed by 159.100.136.21 port 42404 [preauth]
Sep 24 16:32:11 nativespace-cdp sshd[1753948]: Invalid user deploy from 13.200.30.158 port 34712
Sep 24 16:32:11 nativespace-cdp sshd[1753948]: input_userauth_request: invalid user deploy [preauth]
Sep 24 16:32:11 nativespace-cdp sshd[1753948]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:32:11 nativespace-cdp sshd[1753948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.200.30.158
Sep 24 16:32:13 nativespace-cdp sshd[1753948]: Failed password for invalid user deploy from 13.200.30.158 port 34712 ssh2
Sep 24 16:32:13 nativespace-cdp sshd[1753948]: Received disconnect from 13.200.30.158 port 34712:11: Bye Bye [preauth]
Sep 24 16:32:13 nativespace-cdp sshd[1753948]: Disconnected from 13.200.30.158 port 34712 [preauth]
Sep 24 16:32:27 nativespace-cdp sshd[1754008]: Invalid user ubuntu from 46.226.162.44 port 41988
Sep 24 16:32:27 nativespace-cdp sshd[1754008]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 16:32:27 nativespace-cdp sshd[1754008]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:32:27 nativespace-cdp sshd[1754008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.226.162.44
Sep 24 16:32:29 nativespace-cdp sshd[1754008]: Failed password for invalid user ubuntu from 46.226.162.44 port 41988 ssh2
Sep 24 16:32:33 nativespace-cdp sshd[1754008]: Received disconnect from 46.226.162.44 port 41988:11: Bye Bye [preauth]
Sep 24 16:32:33 nativespace-cdp sshd[1754008]: Disconnected from 46.226.162.44 port 41988 [preauth]
Sep 24 16:33:07 nativespace-cdp sshd[1754159]: Invalid user superman from 27.254.235.1 port 54474
Sep 24 16:33:07 nativespace-cdp sshd[1754159]: input_userauth_request: invalid user superman [preauth]
Sep 24 16:33:07 nativespace-cdp sshd[1754159]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:33:07 nativespace-cdp sshd[1754159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.235.1
Sep 24 16:33:08 nativespace-cdp sshd[1754165]: Invalid user user1 from 46.226.162.44 port 59558
Sep 24 16:33:08 nativespace-cdp sshd[1754165]: input_userauth_request: invalid user user1 [preauth]
Sep 24 16:33:08 nativespace-cdp sshd[1754165]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:33:08 nativespace-cdp sshd[1754165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.226.162.44
Sep 24 16:33:09 nativespace-cdp sshd[1754165]: Failed password for invalid user user1 from 46.226.162.44 port 59558 ssh2
Sep 24 16:33:09 nativespace-cdp sshd[1754159]: Failed password for invalid user superman from 27.254.235.1 port 54474 ssh2
Sep 24 16:33:09 nativespace-cdp sshd[1754165]: Received disconnect from 46.226.162.44 port 59558:11: Bye Bye [preauth]
Sep 24 16:33:09 nativespace-cdp sshd[1754165]: Disconnected from 46.226.162.44 port 59558 [preauth]
Sep 24 16:33:09 nativespace-cdp sshd[1754159]: Received disconnect from 27.254.235.1 port 54474:11: Bye Bye [preauth]
Sep 24 16:33:09 nativespace-cdp sshd[1754159]: Disconnected from 27.254.235.1 port 54474 [preauth]
Sep 24 16:33:23 nativespace-cdp sshd[1754252]: Invalid user user from 212.227.85.49 port 57194
Sep 24 16:33:23 nativespace-cdp sshd[1754252]: input_userauth_request: invalid user user [preauth]
Sep 24 16:33:23 nativespace-cdp sshd[1754252]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:33:23 nativespace-cdp sshd[1754252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.227.85.49
Sep 24 16:33:25 nativespace-cdp sshd[1754252]: Failed password for invalid user user from 212.227.85.49 port 57194 ssh2
Sep 24 16:33:26 nativespace-cdp sshd[1754252]: Received disconnect from 212.227.85.49 port 57194:11: Bye Bye [preauth]
Sep 24 16:33:26 nativespace-cdp sshd[1754252]: Disconnected from 212.227.85.49 port 57194 [preauth]
Sep 24 16:33:49 nativespace-cdp sshd[1754406]: Invalid user sysadmin from 13.200.30.158 port 44526
Sep 24 16:33:49 nativespace-cdp sshd[1754406]: input_userauth_request: invalid user sysadmin [preauth]
Sep 24 16:33:49 nativespace-cdp sshd[1754406]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:33:49 nativespace-cdp sshd[1754406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.200.30.158
Sep 24 16:33:51 nativespace-cdp sshd[1754406]: Failed password for invalid user sysadmin from 13.200.30.158 port 44526 ssh2
Sep 24 16:33:51 nativespace-cdp sshd[1754406]: Received disconnect from 13.200.30.158 port 44526:11: Bye Bye [preauth]
Sep 24 16:33:51 nativespace-cdp sshd[1754406]: Disconnected from 13.200.30.158 port 44526 [preauth]
Sep 24 16:33:57 nativespace-cdp sshd[1754428]: Invalid user test from 27.254.235.1 port 38452
Sep 24 16:33:57 nativespace-cdp sshd[1754428]: input_userauth_request: invalid user test [preauth]
Sep 24 16:33:57 nativespace-cdp sshd[1754428]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:33:57 nativespace-cdp sshd[1754428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.235.1
Sep 24 16:33:59 nativespace-cdp sshd[1754428]: Failed password for invalid user test from 27.254.235.1 port 38452 ssh2
Sep 24 16:33:59 nativespace-cdp sshd[1754428]: Received disconnect from 27.254.235.1 port 38452:11: Bye Bye [preauth]
Sep 24 16:33:59 nativespace-cdp sshd[1754428]: Disconnected from 27.254.235.1 port 38452 [preauth]
Sep 24 16:34:03 nativespace-cdp sshd[1754493]: Invalid user username from 212.227.85.49 port 37922
Sep 24 16:34:03 nativespace-cdp sshd[1754493]: input_userauth_request: invalid user username [preauth]
Sep 24 16:34:03 nativespace-cdp sshd[1754493]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:34:03 nativespace-cdp sshd[1754493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.227.85.49
Sep 24 16:34:05 nativespace-cdp sshd[1754493]: Failed password for invalid user username from 212.227.85.49 port 37922 ssh2
Sep 24 16:34:19 nativespace-cdp sshd[1754569]: Invalid user test from 47.243.33.161 port 41184
Sep 24 16:34:19 nativespace-cdp sshd[1754569]: input_userauth_request: invalid user test [preauth]
Sep 24 16:34:19 nativespace-cdp sshd[1754569]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:34:19 nativespace-cdp sshd[1754569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.243.33.161
Sep 24 16:34:21 nativespace-cdp sshd[1754569]: Failed password for invalid user test from 47.243.33.161 port 41184 ssh2
Sep 24 16:34:22 nativespace-cdp sshd[1754569]: Received disconnect from 47.243.33.161 port 41184:11: Bye Bye [preauth]
Sep 24 16:34:22 nativespace-cdp sshd[1754569]: Disconnected from 47.243.33.161 port 41184 [preauth]
Sep 24 16:34:40 nativespace-cdp sshd[1754628]: Invalid user abhishek from 47.243.33.161 port 48292
Sep 24 16:34:40 nativespace-cdp sshd[1754628]: input_userauth_request: invalid user abhishek [preauth]
Sep 24 16:34:40 nativespace-cdp sshd[1754628]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:34:40 nativespace-cdp sshd[1754628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.243.33.161
Sep 24 16:34:40 nativespace-cdp sshd[1754634]: Invalid user ubuntu from 13.200.30.158 port 43446
Sep 24 16:34:40 nativespace-cdp sshd[1754634]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 16:34:40 nativespace-cdp sshd[1754634]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:34:40 nativespace-cdp sshd[1754634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.200.30.158
Sep 24 16:34:42 nativespace-cdp sshd[1754628]: Failed password for invalid user abhishek from 47.243.33.161 port 48292 ssh2
Sep 24 16:34:42 nativespace-cdp sshd[1754628]: Received disconnect from 47.243.33.161 port 48292:11: Bye Bye [preauth]
Sep 24 16:34:42 nativespace-cdp sshd[1754628]: Disconnected from 47.243.33.161 port 48292 [preauth]
Sep 24 16:34:42 nativespace-cdp sshd[1754634]: Failed password for invalid user ubuntu from 13.200.30.158 port 43446 ssh2
Sep 24 16:34:46 nativespace-cdp sshd[1754634]: Received disconnect from 13.200.30.158 port 43446:11: Bye Bye [preauth]
Sep 24 16:34:46 nativespace-cdp sshd[1754634]: Disconnected from 13.200.30.158 port 43446 [preauth]
Sep 24 16:36:33 nativespace-cdp sshd[1755194]: Connection closed by 159.100.136.21 port 51986 [preauth]
Sep 24 16:41:34 nativespace-cdp sshd[1756294]: Connection closed by 159.100.136.21 port 33226 [preauth]
Sep 24 16:42:55 nativespace-cdp sshd[1756528]: Invalid user test from 60.251.120.199 port 45920
Sep 24 16:42:55 nativespace-cdp sshd[1756528]: input_userauth_request: invalid user test [preauth]
Sep 24 16:42:55 nativespace-cdp sshd[1756528]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:42:55 nativespace-cdp sshd[1756528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.251.120.199
Sep 24 16:42:56 nativespace-cdp sshd[1756528]: Failed password for invalid user test from 60.251.120.199 port 45920 ssh2
Sep 24 16:42:57 nativespace-cdp sshd[1756528]: Received disconnect from 60.251.120.199 port 45920:11: Bye Bye [preauth]
Sep 24 16:42:57 nativespace-cdp sshd[1756528]: Disconnected from 60.251.120.199 port 45920 [preauth]
Sep 24 16:46:34 nativespace-cdp sshd[1757533]: Connection closed by 159.100.136.21 port 41946 [preauth]
Sep 24 16:51:33 nativespace-cdp sshd[1758656]: Connection closed by 159.100.136.21 port 50796 [preauth]
Sep 24 16:52:35 nativespace-cdp sshd[1758804]: Invalid user sysadmin from 60.251.120.199 port 46192
Sep 24 16:52:35 nativespace-cdp sshd[1758804]: input_userauth_request: invalid user sysadmin [preauth]
Sep 24 16:52:35 nativespace-cdp sshd[1758804]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 16:52:35 nativespace-cdp sshd[1758804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.251.120.199
Sep 24 16:52:36 nativespace-cdp sshd[1758804]: Failed password for invalid user sysadmin from 60.251.120.199 port 46192 ssh2
Sep 24 16:52:36 nativespace-cdp sshd[1758804]: Received disconnect from 60.251.120.199 port 46192:11: Bye Bye [preauth]
Sep 24 16:52:36 nativespace-cdp sshd[1758804]: Disconnected from 60.251.120.199 port 46192 [preauth]
Sep 24 16:55:38 nativespace-cdp sshd[1759466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.251.120.199  user=root
Sep 24 16:55:38 nativespace-cdp sshd[1759466]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 16:55:40 nativespace-cdp sshd[1759466]: Failed password for root from 60.251.120.199 port 41856 ssh2
Sep 24 16:56:34 nativespace-cdp sshd[1759668]: Connection closed by 159.100.136.21 port 59608 [preauth]
Sep 24 17:01:33 nativespace-cdp sshd[1761189]: Connection closed by 159.100.136.21 port 40560 [preauth]
Sep 24 17:06:33 nativespace-cdp sshd[1762357]: Connection closed by 159.100.136.21 port 48818 [preauth]
Sep 24 17:11:33 nativespace-cdp sshd[1763562]: Connection closed by 159.100.136.21 port 57684 [preauth]
Sep 24 17:16:33 nativespace-cdp sshd[1764868]: Connection closed by 159.100.136.21 port 38612 [preauth]
Sep 24 17:21:34 nativespace-cdp sshd[1765972]: Connection closed by 159.100.136.21 port 47214 [preauth]
Sep 24 17:26:33 nativespace-cdp sshd[1767031]: Connection closed by 159.100.136.21 port 56570 [preauth]
Sep 24 17:31:33 nativespace-cdp sshd[1768355]: Connection closed by 159.100.136.21 port 36708 [preauth]
Sep 24 17:36:34 nativespace-cdp sshd[1769457]: Connection closed by 159.100.136.21 port 46032 [preauth]
Sep 24 17:41:34 nativespace-cdp sshd[1770588]: Connection closed by 159.100.136.21 port 55084 [preauth]
Sep 24 17:46:34 nativespace-cdp sshd[1772397]: Connection closed by 159.100.136.21 port 35924 [preauth]
Sep 24 17:51:33 nativespace-cdp sshd[1773557]: Connection closed by 159.100.136.21 port 44986 [preauth]
Sep 24 17:56:36 nativespace-cdp sshd[1774594]: Connection closed by 159.100.136.21 port 53426 [preauth]
Sep 24 18:01:35 nativespace-cdp sshd[1775934]: Connection closed by 159.100.136.21 port 34240 [preauth]
Sep 24 18:06:33 nativespace-cdp sshd[1777134]: Connection closed by 159.100.136.21 port 43704 [preauth]
Sep 24 18:11:33 nativespace-cdp sshd[1778263]: Connection closed by 159.100.136.21 port 52516 [preauth]
Sep 24 18:16:35 nativespace-cdp sshd[1779826]: Connection closed by 159.100.136.21 port 33994 [preauth]
Sep 24 18:21:33 nativespace-cdp sshd[1781118]: Connection closed by 159.100.136.21 port 42778 [preauth]
Sep 24 18:22:04 nativespace-cdp sshd[1781225]: Invalid user sopuser from 152.32.218.226 port 21810
Sep 24 18:22:04 nativespace-cdp sshd[1781225]: input_userauth_request: invalid user sopuser [preauth]
Sep 24 18:22:04 nativespace-cdp sshd[1781225]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 18:22:04 nativespace-cdp sshd[1781225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.218.226
Sep 24 18:22:06 nativespace-cdp sshd[1781225]: Failed password for invalid user sopuser from 152.32.218.226 port 21810 ssh2
Sep 24 18:22:06 nativespace-cdp sshd[1781225]: Received disconnect from 152.32.218.226 port 21810:11: Bye Bye [preauth]
Sep 24 18:22:06 nativespace-cdp sshd[1781225]: Disconnected from 152.32.218.226 port 21810 [preauth]
Sep 24 18:25:48 nativespace-cdp sshd[1782215]: Invalid user nexus from 159.65.220.18 port 54494
Sep 24 18:25:48 nativespace-cdp sshd[1782215]: input_userauth_request: invalid user nexus [preauth]
Sep 24 18:25:48 nativespace-cdp sshd[1782215]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 18:25:48 nativespace-cdp sshd[1782215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.220.18
Sep 24 18:25:50 nativespace-cdp sshd[1782215]: Failed password for invalid user nexus from 159.65.220.18 port 54494 ssh2
Sep 24 18:25:50 nativespace-cdp sshd[1782215]: Received disconnect from 159.65.220.18 port 54494:11: Bye Bye [preauth]
Sep 24 18:25:50 nativespace-cdp sshd[1782215]: Disconnected from 159.65.220.18 port 54494 [preauth]
Sep 24 18:26:33 nativespace-cdp sshd[1782386]: Connection closed by 159.100.136.21 port 52640 [preauth]
Sep 24 18:27:51 nativespace-cdp sshd[1782663]: Invalid user nexus from 152.32.218.226 port 20416
Sep 24 18:27:51 nativespace-cdp sshd[1782663]: input_userauth_request: invalid user nexus [preauth]
Sep 24 18:27:51 nativespace-cdp sshd[1782663]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 18:27:51 nativespace-cdp sshd[1782663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.218.226
Sep 24 18:27:53 nativespace-cdp sshd[1782663]: Failed password for invalid user nexus from 152.32.218.226 port 20416 ssh2
Sep 24 18:27:54 nativespace-cdp sshd[1782663]: Received disconnect from 152.32.218.226 port 20416:11: Bye Bye [preauth]
Sep 24 18:27:54 nativespace-cdp sshd[1782663]: Disconnected from 152.32.218.226 port 20416 [preauth]
Sep 24 18:27:54 nativespace-cdp sshd[1782675]: Invalid user username from 159.65.220.18 port 37972
Sep 24 18:27:54 nativespace-cdp sshd[1782675]: input_userauth_request: invalid user username [preauth]
Sep 24 18:27:54 nativespace-cdp sshd[1782675]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 18:27:54 nativespace-cdp sshd[1782675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.220.18
Sep 24 18:27:56 nativespace-cdp sshd[1782675]: Failed password for invalid user username from 159.65.220.18 port 37972 ssh2
Sep 24 18:27:57 nativespace-cdp sshd[1782675]: Received disconnect from 159.65.220.18 port 37972:11: Bye Bye [preauth]
Sep 24 18:27:57 nativespace-cdp sshd[1782675]: Disconnected from 159.65.220.18 port 37972 [preauth]
Sep 24 18:28:33 nativespace-cdp sshd[1782793]: Invalid user svn from 159.65.220.18 port 46892
Sep 24 18:28:33 nativespace-cdp sshd[1782793]: input_userauth_request: invalid user svn [preauth]
Sep 24 18:28:33 nativespace-cdp sshd[1782793]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 18:28:33 nativespace-cdp sshd[1782793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.220.18
Sep 24 18:28:35 nativespace-cdp sshd[1782793]: Failed password for invalid user svn from 159.65.220.18 port 46892 ssh2
Sep 24 18:28:35 nativespace-cdp sshd[1782793]: Received disconnect from 159.65.220.18 port 46892:11: Bye Bye [preauth]
Sep 24 18:28:35 nativespace-cdp sshd[1782793]: Disconnected from 159.65.220.18 port 46892 [preauth]
Sep 24 18:28:44 nativespace-cdp sshd[1782851]: Invalid user user from 152.32.218.226 port 33806
Sep 24 18:28:44 nativespace-cdp sshd[1782851]: input_userauth_request: invalid user user [preauth]
Sep 24 18:28:44 nativespace-cdp sshd[1782851]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 18:28:44 nativespace-cdp sshd[1782851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.218.226
Sep 24 18:28:46 nativespace-cdp sshd[1782851]: Failed password for invalid user user from 152.32.218.226 port 33806 ssh2
Sep 24 18:28:46 nativespace-cdp sshd[1782851]: Received disconnect from 152.32.218.226 port 33806:11: Bye Bye [preauth]
Sep 24 18:28:46 nativespace-cdp sshd[1782851]: Disconnected from 152.32.218.226 port 33806 [preauth]
Sep 24 18:31:33 nativespace-cdp sshd[1783881]: Connection closed by 159.100.136.21 port 34086 [preauth]
Sep 24 18:36:35 nativespace-cdp sshd[1784902]: Connection closed by 159.100.136.21 port 43968 [preauth]
Sep 24 18:41:35 nativespace-cdp sshd[1785968]: Connection closed by 159.100.136.21 port 53526 [preauth]
Sep 24 18:46:33 nativespace-cdp sshd[1787232]: Connection closed by 159.100.136.21 port 34952 [preauth]
Sep 24 18:51:33 nativespace-cdp sshd[1788361]: Connection closed by 159.100.136.21 port 43676 [preauth]
Sep 24 18:56:33 nativespace-cdp sshd[1789263]: Connection closed by 159.100.136.21 port 53136 [preauth]
Sep 24 19:01:33 nativespace-cdp sshd[1790585]: Connection closed by 159.100.136.21 port 34064 [preauth]
Sep 24 19:06:26 nativespace-cdp sshd[1791793]: Bad protocol version identification '\003' from 194.165.16.73 port 65068
Sep 24 19:06:33 nativespace-cdp sshd[1791820]: Connection closed by 159.100.136.21 port 43864 [preauth]
Sep 24 19:11:34 nativespace-cdp sshd[1792967]: Connection closed by 159.100.136.21 port 52988 [preauth]
Sep 24 19:21:35 nativespace-cdp sshd[1795443]: Connection closed by 159.100.136.21 port 44554 [preauth]
Sep 24 19:26:33 nativespace-cdp sshd[1796420]: Connection closed by 159.100.136.21 port 54198 [preauth]
Sep 24 19:31:33 nativespace-cdp sshd[1797394]: Connection closed by 159.100.136.21 port 35222 [preauth]
Sep 24 19:36:36 nativespace-cdp sshd[1798652]: Connection closed by 159.100.136.21 port 44512 [preauth]
Sep 24 19:41:35 nativespace-cdp sshd[1799674]: Connection closed by 159.100.136.21 port 53880 [preauth]
Sep 24 19:46:33 nativespace-cdp sshd[1801021]: Connection closed by 159.100.136.21 port 35176 [preauth]
Sep 24 19:53:12 nativespace-cdp CROND[1801709]: pam_systemd(crond:session): Failed to release session: Connection timed out
Sep 24 19:53:14 nativespace-cdp sshd[1802009]: Did not receive identification string from 159.100.136.21 port 44118
Sep 24 19:56:35 nativespace-cdp sshd[1803113]: Connection closed by 159.100.136.21 port 54070 [preauth]
Sep 24 20:01:33 nativespace-cdp sshd[1804135]: Connection closed by 159.100.136.21 port 35196 [preauth]
Sep 24 20:06:33 nativespace-cdp sshd[1805401]: Connection closed by 159.100.136.21 port 44828 [preauth]
Sep 24 20:10:45 nativespace-cdp sshd[1806287]: Invalid user user from 68.233.116.124 port 51540
Sep 24 20:10:45 nativespace-cdp sshd[1806287]: input_userauth_request: invalid user user [preauth]
Sep 24 20:10:45 nativespace-cdp sshd[1806287]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 20:10:45 nativespace-cdp sshd[1806287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.233.116.124
Sep 24 20:10:47 nativespace-cdp sshd[1806287]: Failed password for invalid user user from 68.233.116.124 port 51540 ssh2
Sep 24 20:10:47 nativespace-cdp sshd[1806287]: Received disconnect from 68.233.116.124 port 51540:11: Bye Bye [preauth]
Sep 24 20:10:47 nativespace-cdp sshd[1806287]: Disconnected from 68.233.116.124 port 51540 [preauth]
Sep 24 20:11:33 nativespace-cdp sshd[1806777]: Connection closed by 159.100.136.21 port 54130 [preauth]
Sep 24 20:13:33 nativespace-cdp sshd[1807634]: Invalid user ubuntu from 79.3.96.178 port 42378
Sep 24 20:13:33 nativespace-cdp sshd[1807634]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 20:13:33 nativespace-cdp sshd[1807634]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 20:13:33 nativespace-cdp sshd[1807634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.3.96.178
Sep 24 20:13:35 nativespace-cdp sshd[1807634]: Failed password for invalid user ubuntu from 79.3.96.178 port 42378 ssh2
Sep 24 20:13:35 nativespace-cdp sshd[1807634]: Received disconnect from 79.3.96.178 port 42378:11: Bye Bye [preauth]
Sep 24 20:13:35 nativespace-cdp sshd[1807634]: Disconnected from 79.3.96.178 port 42378 [preauth]
Sep 24 20:15:38 nativespace-cdp sshd[1808418]: Invalid user ubuntu from 68.233.116.124 port 42128
Sep 24 20:15:38 nativespace-cdp sshd[1808418]: input_userauth_request: invalid user ubuntu [preauth]
Sep 24 20:15:38 nativespace-cdp sshd[1808418]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 20:15:38 nativespace-cdp sshd[1808418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.233.116.124
Sep 24 20:15:39 nativespace-cdp sshd[1808418]: Failed password for invalid user ubuntu from 68.233.116.124 port 42128 ssh2
Sep 24 20:15:40 nativespace-cdp sshd[1808418]: Received disconnect from 68.233.116.124 port 42128:11: Bye Bye [preauth]
Sep 24 20:15:40 nativespace-cdp sshd[1808418]: Disconnected from 68.233.116.124 port 42128 [preauth]
Sep 24 20:16:21 nativespace-cdp sshd[1808561]: Invalid user support from 68.233.116.124 port 54500
Sep 24 20:16:21 nativespace-cdp sshd[1808561]: input_userauth_request: invalid user support [preauth]
Sep 24 20:16:21 nativespace-cdp sshd[1808561]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 20:16:21 nativespace-cdp sshd[1808561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.233.116.124
Sep 24 20:16:23 nativespace-cdp sshd[1808561]: Failed password for invalid user support from 68.233.116.124 port 54500 ssh2
Sep 24 20:16:23 nativespace-cdp sshd[1808561]: Received disconnect from 68.233.116.124 port 54500:11: Bye Bye [preauth]
Sep 24 20:16:23 nativespace-cdp sshd[1808561]: Disconnected from 68.233.116.124 port 54500 [preauth]
Sep 24 20:16:37 nativespace-cdp sshd[1808622]: Connection closed by 159.100.136.21 port 35292 [preauth]
Sep 24 20:17:19 nativespace-cdp sshd[1808744]: Invalid user superman from 79.3.96.178 port 46978
Sep 24 20:17:19 nativespace-cdp sshd[1808744]: input_userauth_request: invalid user superman [preauth]
Sep 24 20:17:19 nativespace-cdp sshd[1808744]: pam_unix(sshd:auth): check pass; user unknown
Sep 24 20:17:19 nativespace-cdp sshd[1808744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.3.96.178
Sep 24 20:17:21 nativespace-cdp sshd[1808744]: Failed password for invalid user superman from 79.3.96.178 port 46978 ssh2
Sep 24 20:17:21 nativespace-cdp sshd[1808744]: Received disconnect from 79.3.96.178 port 46978:11: Bye Bye [preauth]
Sep 24 20:17:21 nativespace-cdp sshd[1808744]: Disconnected from 79.3.96.178 port 46978 [preauth]
Sep 24 20:18:08 nativespace-cdp sshd[1808876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.3.96.178  user=root
Sep 24 20:18:08 nativespace-cdp sshd[1808876]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 24 20:18:10 nativespace-cdp sshd[1808876]: Failed password for root from 79.3.96.178 port 33302 ssh2
Sep 24 20:18:10 nativespace-cdp sshd[1808876]: Received disconnect from 79.3.96.178 port 33302:11: Bye Bye [preauth]
Sep 24 20:18:10 nativespace-cdp sshd[1808876]: Disconnected from 79.3.96.178 port 33302 [preauth]
Sep 24 20:21:33 nativespace-cdp sshd[1809628]: Connection closed by 159.100.136.21 port 44430 [preauth]
Sep 24 20:26:33 nativespace-cdp sshd[1810745]: Connection closed by 159.100.136.21 port 54212 [preauth]
Sep 24 20:31:33 nativespace-cdp sshd[1811928]: Connection closed by 159.100.136.21 port 34390 [preauth]
Sep 24 20:36:33 nativespace-cdp sshd[1813023]: Connection closed by 159.100.136.21 port 44030 [preauth]
Sep 24 20:41:33 nativespace-cdp sshd[1814252]: Connection closed by 159.100.136.21 port 53386 [preauth]
Sep 24 20:46:33 nativespace-cdp sshd[1815572]: Connection closed by 159.100.136.21 port 34672 [preauth]
Sep 24 20:51:33 nativespace-cdp sshd[1816566]: Connection closed by 159.100.136.21 port 44380 [preauth]
Sep 24 20:56:36 nativespace-cdp sshd[1817714]: Connection closed by 159.100.136.21 port 54110 [preauth]
Sep 24 21:01:33 nativespace-cdp sshd[1819198]: Connection closed by 159.100.136.21 port 35010 [preauth]
Sep 24 21:06:33 nativespace-cdp sshd[1820237]: Connection closed by 159.100.136.21 port 44508 [preauth]
Sep 24 21:11:33 nativespace-cdp sshd[1821257]: Connection closed by 159.100.136.21 port 53658 [preauth]
Sep 24 21:16:35 nativespace-cdp sshd[1822565]: Connection closed by 159.100.136.21 port 34488 [preauth]
Sep 24 21:21:34 nativespace-cdp sshd[1823626]: Connection closed by 159.100.136.21 port 43832 [preauth]
Sep 24 21:26:33 nativespace-cdp sshd[1824656]: Connection closed by 159.100.136.21 port 52712 [preauth]
Sep 24 21:31:33 nativespace-cdp sshd[1826202]: Connection closed by 159.100.136.21 port 33930 [preauth]
Sep 24 21:36:33 nativespace-cdp sshd[1827383]: Connection closed by 159.100.136.21 port 43424 [preauth]
Sep 24 21:41:36 nativespace-cdp sshd[1828648]: Connection closed by 159.100.136.21 port 52580 [preauth]
Sep 24 21:46:33 nativespace-cdp sshd[1829973]: Connection closed by 159.100.136.21 port 33734 [preauth]
Sep 24 21:51:33 nativespace-cdp sshd[1830956]: Connection closed by 159.100.136.21 port 43368 [preauth]
Sep 24 21:56:55 nativespace-cdp sshd[1832104]: Did not receive identification string from 159.100.136.21 port 52108
Sep 24 21:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 21:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 21:57:18 nativespace-cdp sudo[1832301]: pam_unix(sudo:session): session closed for user root
Sep 24 21:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status ggaaorgu
Sep 24 21:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 21:57:32 nativespace-cdp sudo[1832311]: pam_unix(sudo:session): session closed for user root
Sep 24 21:57:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 21:57:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 21:57:41 nativespace-cdp sudo[1832395]: pam_unix(sudo:session): session closed for user root
Sep 24 21:57:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status ggaaorgu
Sep 24 21:57:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 21:57:41 nativespace-cdp sudo[1832399]: pam_unix(sudo:session): session closed for user root
Sep 24 21:57:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 21:57:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 21:57:43 nativespace-cdp sudo[1832431]: pam_unix(sudo:session): session closed for user root
Sep 24 21:57:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status ggaaorgu
Sep 24 21:57:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 21:57:43 nativespace-cdp sudo[1832436]: pam_unix(sudo:session): session closed for user root
Sep 24 21:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 21:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 21:57:45 nativespace-cdp sudo[1832452]: pam_unix(sudo:session): session closed for user root
Sep 24 21:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status ggaaorgu
Sep 24 21:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 21:57:45 nativespace-cdp sudo[1832456]: pam_unix(sudo:session): session closed for user root
Sep 24 22:01:34 nativespace-cdp sshd[1833979]: Connection closed by 159.100.136.21 port 33204 [preauth]
Sep 24 22:06:33 nativespace-cdp sshd[1835213]: Connection closed by 159.100.136.21 port 43286 [preauth]
Sep 24 22:08:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 24 22:08:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 22:08:08 nativespace-cdp sudo[1835515]: pam_unix(sudo:session): session closed for user root
Sep 24 22:08:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status ggaaorgu
Sep 24 22:08:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 24 22:08:09 nativespace-cdp sudo[1835522]: pam_unix(sudo:session): session closed for user root
Sep 24 22:11:35 nativespace-cdp sshd[1836319]: Connection closed by 159.100.136.21 port 53084 [preauth]
Sep 24 22:16:33 nativespace-cdp sshd[1837614]: Connection closed by 159.100.136.21 port 34480 [preauth]
Sep 24 22:21:33 nativespace-cdp sshd[1838864]: Connection closed by 159.100.136.21 port 44054 [preauth]
Sep 24 22:26:33 nativespace-cdp sshd[1839842]: Connection closed by 159.100.136.21 port 53866 [preauth]
Sep 24 22:36:33 nativespace-cdp sshd[1842822]: Connection closed by 159.100.136.21 port 45322 [preauth]
Sep 24 22:41:36 nativespace-cdp sshd[1844325]: Connection closed by 159.100.136.21 port 54822 [preauth]
Sep 24 22:46:39 nativespace-cdp sshd[1845725]: Connection closed by 159.100.136.21 port 36532 [preauth]
Sep 24 22:51:33 nativespace-cdp sshd[1847026]: Connection closed by 159.100.136.21 port 46130 [preauth]
Sep 24 22:56:33 nativespace-cdp sshd[1847965]: Connection closed by 159.100.136.21 port 55434 [preauth]
Sep 24 23:06:33 nativespace-cdp sshd[1850506]: Connection closed by 159.100.136.21 port 46714 [preauth]
Sep 24 23:11:33 nativespace-cdp sshd[1851492]: Connection closed by 159.100.136.21 port 55976 [preauth]
Sep 24 23:16:33 nativespace-cdp sshd[1852836]: Connection closed by 159.100.136.21 port 37860 [preauth]
Sep 24 23:21:37 nativespace-cdp sshd[1854009]: Connection closed by 159.100.136.21 port 47466 [preauth]
Sep 24 23:26:33 nativespace-cdp sshd[1854918]: Connection closed by 159.100.136.21 port 57478 [preauth]
Sep 24 23:31:33 nativespace-cdp sshd[1855979]: Connection closed by 159.100.136.21 port 39006 [preauth]
Sep 24 23:36:33 nativespace-cdp sshd[1857140]: Connection closed by 159.100.136.21 port 48656 [preauth]
Sep 24 23:41:36 nativespace-cdp sshd[1858077]: Connection closed by 159.100.136.21 port 58114 [preauth]
Sep 24 23:46:33 nativespace-cdp sshd[1859330]: Connection closed by 159.100.136.21 port 39272 [preauth]
Sep 24 23:51:33 nativespace-cdp sshd[1860376]: Connection closed by 159.100.136.21 port 48648 [preauth]
Sep 24 23:56:33 nativespace-cdp sshd[1862114]: Connection closed by 159.100.136.21 port 58236 [preauth]
Sep 25 00:01:33 nativespace-cdp sshd[1863544]: Connection closed by 159.100.136.21 port 39558 [preauth]
Sep 25 00:06:33 nativespace-cdp sshd[1864428]: Connection closed by 159.100.136.21 port 48814 [preauth]
Sep 25 00:11:33 nativespace-cdp sshd[1865341]: Connection closed by 159.100.136.21 port 58308 [preauth]
Sep 25 00:16:34 nativespace-cdp sshd[1866647]: Connection closed by 159.100.136.21 port 39422 [preauth]
Sep 25 00:21:33 nativespace-cdp sshd[1867567]: Connection closed by 159.100.136.21 port 48860 [preauth]
Sep 25 00:26:34 nativespace-cdp sshd[1868418]: Connection closed by 159.100.136.21 port 58124 [preauth]
Sep 25 00:31:33 nativespace-cdp sshd[1869634]: Connection closed by 159.100.136.21 port 39428 [preauth]
Sep 25 00:36:33 nativespace-cdp sshd[1870643]: Connection closed by 159.100.136.21 port 49506 [preauth]
Sep 25 00:41:33 nativespace-cdp sshd[1871550]: Connection closed by 159.100.136.21 port 59154 [preauth]
Sep 25 00:46:33 nativespace-cdp sshd[1872716]: Connection closed by 159.100.136.21 port 40202 [preauth]
Sep 25 00:51:33 nativespace-cdp sshd[1873797]: Connection closed by 159.100.136.21 port 49764 [preauth]
Sep 25 00:56:36 nativespace-cdp sshd[1874657]: Connection closed by 159.100.136.21 port 59262 [preauth]
Sep 25 01:01:33 nativespace-cdp sshd[1876107]: Connection closed by 159.100.136.21 port 39456 [preauth]
Sep 25 01:06:36 nativespace-cdp sshd[1877071]: Connection closed by 159.100.136.21 port 48558 [preauth]
Sep 25 01:11:37 nativespace-cdp sshd[1877977]: Connection closed by 159.100.136.21 port 58066 [preauth]
Sep 25 01:16:33 nativespace-cdp sshd[1879226]: Connection closed by 159.100.136.21 port 38252 [preauth]
Sep 25 01:21:30 nativespace-cdp sshd[1880184]: Invalid user ubuntu from 101.36.110.224 port 41554
Sep 25 01:21:30 nativespace-cdp sshd[1880184]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 01:21:30 nativespace-cdp sshd[1880184]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 01:21:30 nativespace-cdp sshd[1880184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.110.224
Sep 25 01:21:32 nativespace-cdp sshd[1880184]: Failed password for invalid user ubuntu from 101.36.110.224 port 41554 ssh2
Sep 25 01:21:32 nativespace-cdp sshd[1880184]: Received disconnect from 101.36.110.224 port 41554:11: Bye Bye [preauth]
Sep 25 01:21:32 nativespace-cdp sshd[1880184]: Disconnected from 101.36.110.224 port 41554 [preauth]
Sep 25 01:21:33 nativespace-cdp sshd[1880199]: Connection closed by 159.100.136.21 port 47308 [preauth]
Sep 25 01:26:33 nativespace-cdp sshd[1881092]: Connection closed by 159.100.136.21 port 57276 [preauth]
Sep 25 01:28:32 nativespace-cdp sshd[1881425]: Did not receive identification string from 101.36.110.224 port 60546
Sep 25 01:31:35 nativespace-cdp sshd[1882282]: Connection closed by 159.100.136.21 port 38508 [preauth]
Sep 25 01:36:33 nativespace-cdp sshd[1883448]: Connection closed by 159.100.136.21 port 48236 [preauth]
Sep 25 01:40:53 nativespace-cdp sshd[1884371]: Invalid user tuan from 101.36.110.224 port 44798
Sep 25 01:40:53 nativespace-cdp sshd[1884371]: input_userauth_request: invalid user tuan [preauth]
Sep 25 01:40:53 nativespace-cdp sshd[1884371]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 01:40:53 nativespace-cdp sshd[1884371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.110.224
Sep 25 01:40:55 nativespace-cdp sshd[1884371]: Failed password for invalid user tuan from 101.36.110.224 port 44798 ssh2
Sep 25 01:40:59 nativespace-cdp sshd[1884371]: Received disconnect from 101.36.110.224 port 44798:11: Bye Bye [preauth]
Sep 25 01:40:59 nativespace-cdp sshd[1884371]: Disconnected from 101.36.110.224 port 44798 [preauth]
Sep 25 01:41:33 nativespace-cdp sshd[1884507]: Connection closed by 159.100.136.21 port 57792 [preauth]
Sep 25 01:46:33 nativespace-cdp sshd[1885811]: Connection closed by 159.100.136.21 port 38920 [preauth]
Sep 25 01:51:33 nativespace-cdp sshd[1886861]: Connection closed by 159.100.136.21 port 47846 [preauth]
Sep 25 01:56:36 nativespace-cdp sshd[1887629]: Connection closed by 159.100.136.21 port 57442 [preauth]
Sep 25 02:01:33 nativespace-cdp sshd[1888661]: Connection closed by 159.100.136.21 port 38366 [preauth]
Sep 25 02:06:34 nativespace-cdp sshd[1889854]: Connection closed by 159.100.136.21 port 48198 [preauth]
Sep 25 02:11:33 nativespace-cdp sshd[1890780]: Connection closed by 159.100.136.21 port 57584 [preauth]
Sep 25 02:16:33 nativespace-cdp sshd[1892524]: Connection closed by 159.100.136.21 port 38484 [preauth]
Sep 25 02:18:15 nativespace-cdp sshd[1892843]: Invalid user ubuntu from 47.236.4.168 port 47296
Sep 25 02:18:15 nativespace-cdp sshd[1892843]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 02:18:15 nativespace-cdp sshd[1892843]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 02:18:15 nativespace-cdp sshd[1892843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.4.168
Sep 25 02:18:17 nativespace-cdp sshd[1892843]: Failed password for invalid user ubuntu from 47.236.4.168 port 47296 ssh2
Sep 25 02:18:18 nativespace-cdp sshd[1892843]: Received disconnect from 47.236.4.168 port 47296:11: Bye Bye [preauth]
Sep 25 02:18:18 nativespace-cdp sshd[1892843]: Disconnected from 47.236.4.168 port 47296 [preauth]
Sep 25 02:20:09 nativespace-cdp sshd[1893317]: Invalid user user from 52.174.177.248 port 43754
Sep 25 02:20:09 nativespace-cdp sshd[1893317]: input_userauth_request: invalid user user [preauth]
Sep 25 02:20:09 nativespace-cdp sshd[1893317]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 02:20:09 nativespace-cdp sshd[1893317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.174.177.248
Sep 25 02:20:11 nativespace-cdp sshd[1893317]: Failed password for invalid user user from 52.174.177.248 port 43754 ssh2
Sep 25 02:20:11 nativespace-cdp sshd[1893317]: Received disconnect from 52.174.177.248 port 43754:11: Bye Bye [preauth]
Sep 25 02:20:11 nativespace-cdp sshd[1893317]: Disconnected from 52.174.177.248 port 43754 [preauth]
Sep 25 02:21:08 nativespace-cdp sshd[1893517]: Connection closed by 68.183.136.88 port 51604 [preauth]
Sep 25 02:21:36 nativespace-cdp sshd[1893621]: Connection closed by 159.100.136.21 port 48028 [preauth]
Sep 25 02:24:39 nativespace-cdp sshd[1894309]: Invalid user support from 52.174.177.248 port 45870
Sep 25 02:24:39 nativespace-cdp sshd[1894309]: input_userauth_request: invalid user support [preauth]
Sep 25 02:24:39 nativespace-cdp sshd[1894309]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 02:24:39 nativespace-cdp sshd[1894309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.174.177.248
Sep 25 02:24:41 nativespace-cdp sshd[1894309]: Failed password for invalid user support from 52.174.177.248 port 45870 ssh2
Sep 25 02:24:41 nativespace-cdp sshd[1894309]: Received disconnect from 52.174.177.248 port 45870:11: Bye Bye [preauth]
Sep 25 02:24:41 nativespace-cdp sshd[1894309]: Disconnected from 52.174.177.248 port 45870 [preauth]
Sep 25 02:25:12 nativespace-cdp sshd[1894653]: Invalid user test from 47.236.4.168 port 37938
Sep 25 02:25:12 nativespace-cdp sshd[1894653]: input_userauth_request: invalid user test [preauth]
Sep 25 02:25:12 nativespace-cdp sshd[1894653]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 02:25:12 nativespace-cdp sshd[1894653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.4.168
Sep 25 02:25:14 nativespace-cdp sshd[1894653]: Failed password for invalid user test from 47.236.4.168 port 37938 ssh2
Sep 25 02:25:14 nativespace-cdp sshd[1894653]: Received disconnect from 47.236.4.168 port 37938:11: Bye Bye [preauth]
Sep 25 02:25:14 nativespace-cdp sshd[1894653]: Disconnected from 47.236.4.168 port 37938 [preauth]
Sep 25 02:25:21 nativespace-cdp sshd[1894726]: Invalid user tomcat from 52.174.177.248 port 57412
Sep 25 02:25:21 nativespace-cdp sshd[1894726]: input_userauth_request: invalid user tomcat [preauth]
Sep 25 02:25:21 nativespace-cdp sshd[1894726]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 02:25:21 nativespace-cdp sshd[1894726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.174.177.248
Sep 25 02:25:22 nativespace-cdp sshd[1894726]: Failed password for invalid user tomcat from 52.174.177.248 port 57412 ssh2
Sep 25 02:25:22 nativespace-cdp sshd[1894726]: Received disconnect from 52.174.177.248 port 57412:11: Bye Bye [preauth]
Sep 25 02:25:22 nativespace-cdp sshd[1894726]: Disconnected from 52.174.177.248 port 57412 [preauth]
Sep 25 02:25:36 nativespace-cdp sshd[1894821]: Invalid user roots from 47.236.4.168 port 45652
Sep 25 02:25:36 nativespace-cdp sshd[1894821]: input_userauth_request: invalid user roots [preauth]
Sep 25 02:25:36 nativespace-cdp sshd[1894821]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 02:25:36 nativespace-cdp sshd[1894821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.4.168
Sep 25 02:25:38 nativespace-cdp sshd[1894821]: Failed password for invalid user roots from 47.236.4.168 port 45652 ssh2
Sep 25 02:25:38 nativespace-cdp sshd[1894821]: Received disconnect from 47.236.4.168 port 45652:11: Bye Bye [preauth]
Sep 25 02:25:38 nativespace-cdp sshd[1894821]: Disconnected from 47.236.4.168 port 45652 [preauth]
Sep 25 02:26:33 nativespace-cdp sshd[1895120]: Connection closed by 159.100.136.21 port 57318 [preauth]
Sep 25 02:27:26 nativespace-cdp sshd[1895282]: Invalid user user from 41.214.20.60 port 52321
Sep 25 02:27:26 nativespace-cdp sshd[1895282]: input_userauth_request: invalid user user [preauth]
Sep 25 02:27:26 nativespace-cdp sshd[1895282]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 02:27:26 nativespace-cdp sshd[1895282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.214.20.60
Sep 25 02:27:28 nativespace-cdp sshd[1895282]: Failed password for invalid user user from 41.214.20.60 port 52321 ssh2
Sep 25 02:27:29 nativespace-cdp sshd[1895282]: Received disconnect from 41.214.20.60 port 52321:11: Bye Bye [preauth]
Sep 25 02:27:29 nativespace-cdp sshd[1895282]: Disconnected from 41.214.20.60 port 52321 [preauth]
Sep 25 02:29:54 nativespace-cdp sshd[1896072]: Invalid user ubuntu from 41.214.20.60 port 46817
Sep 25 02:29:54 nativespace-cdp sshd[1896072]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 02:29:54 nativespace-cdp sshd[1896072]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 02:29:54 nativespace-cdp sshd[1896072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.214.20.60
Sep 25 02:29:56 nativespace-cdp sshd[1896072]: Failed password for invalid user ubuntu from 41.214.20.60 port 46817 ssh2
Sep 25 02:29:59 nativespace-cdp sshd[1896072]: Received disconnect from 41.214.20.60 port 46817:11: Bye Bye [preauth]
Sep 25 02:29:59 nativespace-cdp sshd[1896072]: Disconnected from 41.214.20.60 port 46817 [preauth]
Sep 25 02:31:30 nativespace-cdp sshd[1896541]: Invalid user ubuntu from 41.214.20.60 port 33883
Sep 25 02:31:30 nativespace-cdp sshd[1896541]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 02:31:30 nativespace-cdp sshd[1896541]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 02:31:30 nativespace-cdp sshd[1896541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.214.20.60
Sep 25 02:31:32 nativespace-cdp sshd[1896541]: Failed password for invalid user ubuntu from 41.214.20.60 port 33883 ssh2
Sep 25 02:31:32 nativespace-cdp sshd[1896541]: Received disconnect from 41.214.20.60 port 33883:11: Bye Bye [preauth]
Sep 25 02:31:32 nativespace-cdp sshd[1896541]: Disconnected from 41.214.20.60 port 33883 [preauth]
Sep 25 02:31:33 nativespace-cdp sshd[1896553]: Connection closed by 159.100.136.21 port 38018 [preauth]
Sep 25 02:36:33 nativespace-cdp sshd[1897486]: Connection closed by 159.100.136.21 port 47498 [preauth]
Sep 25 02:41:34 nativespace-cdp sshd[1898361]: Connection closed by 159.100.136.21 port 56964 [preauth]
Sep 25 02:46:34 nativespace-cdp sshd[1899631]: Connection closed by 159.100.136.21 port 38468 [preauth]
Sep 25 02:51:33 nativespace-cdp sshd[1900686]: Connection closed by 159.100.136.21 port 47978 [preauth]
Sep 25 02:56:33 nativespace-cdp sshd[1901824]: Connection closed by 159.100.136.21 port 57694 [preauth]
Sep 25 03:01:35 nativespace-cdp sshd[1903325]: Connection closed by 159.100.136.21 port 38992 [preauth]
Sep 25 03:06:36 nativespace-cdp sshd[1904422]: Connection closed by 159.100.136.21 port 48570 [preauth]
Sep 25 03:11:33 nativespace-cdp sshd[1905327]: Connection closed by 159.100.136.21 port 57452 [preauth]
Sep 25 03:16:33 nativespace-cdp sshd[1906605]: Connection closed by 159.100.136.21 port 38656 [preauth]
Sep 25 03:18:07 nativespace-cdp sshd[1906838]: Invalid user ubuntu from 222.253.33.98 port 39400
Sep 25 03:18:07 nativespace-cdp sshd[1906838]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 03:18:07 nativespace-cdp sshd[1906838]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:18:07 nativespace-cdp sshd[1906838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.33.98
Sep 25 03:18:08 nativespace-cdp sshd[1906838]: Failed password for invalid user ubuntu from 222.253.33.98 port 39400 ssh2
Sep 25 03:18:09 nativespace-cdp sshd[1906838]: Received disconnect from 222.253.33.98 port 39400:11: Bye Bye [preauth]
Sep 25 03:18:09 nativespace-cdp sshd[1906838]: Disconnected from 222.253.33.98 port 39400 [preauth]
Sep 25 03:20:29 nativespace-cdp sshd[1907347]: Invalid user ubuntu from 146.0.121.234 port 39036
Sep 25 03:20:29 nativespace-cdp sshd[1907347]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 03:20:29 nativespace-cdp sshd[1907347]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:20:29 nativespace-cdp sshd[1907347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.0.121.234
Sep 25 03:20:31 nativespace-cdp sshd[1907347]: Failed password for invalid user ubuntu from 146.0.121.234 port 39036 ssh2
Sep 25 03:20:35 nativespace-cdp sshd[1907347]: Received disconnect from 146.0.121.234 port 39036:11: Bye Bye [preauth]
Sep 25 03:20:35 nativespace-cdp sshd[1907347]: Disconnected from 146.0.121.234 port 39036 [preauth]
Sep 25 03:21:00 nativespace-cdp sshd[1907411]: Invalid user j from 82.196.3.179 port 35346
Sep 25 03:21:00 nativespace-cdp sshd[1907411]: input_userauth_request: invalid user j [preauth]
Sep 25 03:21:00 nativespace-cdp sshd[1907411]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:21:00 nativespace-cdp sshd[1907411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.3.179
Sep 25 03:21:02 nativespace-cdp sshd[1907411]: Failed password for invalid user j from 82.196.3.179 port 35346 ssh2
Sep 25 03:21:02 nativespace-cdp sshd[1907411]: Received disconnect from 82.196.3.179 port 35346:11: Bye Bye [preauth]
Sep 25 03:21:02 nativespace-cdp sshd[1907411]: Disconnected from 82.196.3.179 port 35346 [preauth]
Sep 25 03:21:33 nativespace-cdp sshd[1907506]: Connection closed by 159.100.136.21 port 47406 [preauth]
Sep 25 03:21:58 nativespace-cdp sshd[1907552]: Invalid user support from 123.23.118.38 port 36750
Sep 25 03:21:58 nativespace-cdp sshd[1907552]: input_userauth_request: invalid user support [preauth]
Sep 25 03:21:58 nativespace-cdp sshd[1907552]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:21:58 nativespace-cdp sshd[1907552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.23.118.38
Sep 25 03:22:00 nativespace-cdp sshd[1907552]: Failed password for invalid user support from 123.23.118.38 port 36750 ssh2
Sep 25 03:22:00 nativespace-cdp sshd[1907552]: Received disconnect from 123.23.118.38 port 36750:11: Bye Bye [preauth]
Sep 25 03:22:00 nativespace-cdp sshd[1907552]: Disconnected from 123.23.118.38 port 36750 [preauth]
Sep 25 03:22:08 nativespace-cdp sshd[1907589]: Invalid user test from 103.107.91.91 port 45856
Sep 25 03:22:08 nativespace-cdp sshd[1907589]: input_userauth_request: invalid user test [preauth]
Sep 25 03:22:08 nativespace-cdp sshd[1907589]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:22:08 nativespace-cdp sshd[1907589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.91.91
Sep 25 03:22:10 nativespace-cdp sshd[1907589]: Failed password for invalid user test from 103.107.91.91 port 45856 ssh2
Sep 25 03:22:11 nativespace-cdp sshd[1907589]: Received disconnect from 103.107.91.91 port 45856:11: Bye Bye [preauth]
Sep 25 03:22:11 nativespace-cdp sshd[1907589]: Disconnected from 103.107.91.91 port 45856 [preauth]
Sep 25 03:23:02 nativespace-cdp sshd[1907716]: Invalid user username from 146.0.121.234 port 10767
Sep 25 03:23:02 nativespace-cdp sshd[1907716]: input_userauth_request: invalid user username [preauth]
Sep 25 03:23:02 nativespace-cdp sshd[1907716]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:23:02 nativespace-cdp sshd[1907716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.0.121.234
Sep 25 03:23:04 nativespace-cdp sshd[1907716]: Failed password for invalid user username from 146.0.121.234 port 10767 ssh2
Sep 25 03:23:04 nativespace-cdp sshd[1907716]: Received disconnect from 146.0.121.234 port 10767:11: Bye Bye [preauth]
Sep 25 03:23:04 nativespace-cdp sshd[1907716]: Disconnected from 146.0.121.234 port 10767 [preauth]
Sep 25 03:23:18 nativespace-cdp sshd[1907750]: Invalid user abhishek from 82.196.3.179 port 33720
Sep 25 03:23:18 nativespace-cdp sshd[1907750]: input_userauth_request: invalid user abhishek [preauth]
Sep 25 03:23:18 nativespace-cdp sshd[1907750]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:23:18 nativespace-cdp sshd[1907750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.3.179
Sep 25 03:23:19 nativespace-cdp sshd[1907750]: Failed password for invalid user abhishek from 82.196.3.179 port 33720 ssh2
Sep 25 03:23:23 nativespace-cdp sshd[1907750]: Received disconnect from 82.196.3.179 port 33720:11: Bye Bye [preauth]
Sep 25 03:23:23 nativespace-cdp sshd[1907750]: Disconnected from 82.196.3.179 port 33720 [preauth]
Sep 25 03:23:24 nativespace-cdp sshd[1907754]: Received disconnect from 222.253.33.98 port 49132:11: Bye Bye [preauth]
Sep 25 03:23:24 nativespace-cdp sshd[1907754]: Disconnected from 222.253.33.98 port 49132 [preauth]
Sep 25 03:23:47 nativespace-cdp sshd[1907809]: Invalid user jimmy from 146.0.121.234 port 13002
Sep 25 03:23:47 nativespace-cdp sshd[1907809]: input_userauth_request: invalid user jimmy [preauth]
Sep 25 03:23:47 nativespace-cdp sshd[1907809]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:23:47 nativespace-cdp sshd[1907809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.0.121.234
Sep 25 03:23:49 nativespace-cdp sshd[1907809]: Failed password for invalid user jimmy from 146.0.121.234 port 13002 ssh2
Sep 25 03:23:49 nativespace-cdp sshd[1907809]: Received disconnect from 146.0.121.234 port 13002:11: Bye Bye [preauth]
Sep 25 03:23:49 nativespace-cdp sshd[1907809]: Disconnected from 146.0.121.234 port 13002 [preauth]
Sep 25 03:23:55 nativespace-cdp sshd[1907824]: Invalid user ubuntu from 123.23.118.38 port 47241
Sep 25 03:23:55 nativespace-cdp sshd[1907824]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 03:23:55 nativespace-cdp sshd[1907824]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:23:55 nativespace-cdp sshd[1907824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.23.118.38
Sep 25 03:23:56 nativespace-cdp sshd[1907857]: Invalid user test01 from 82.196.3.179 port 46384
Sep 25 03:23:56 nativespace-cdp sshd[1907857]: input_userauth_request: invalid user test01 [preauth]
Sep 25 03:23:56 nativespace-cdp sshd[1907857]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:23:56 nativespace-cdp sshd[1907857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.3.179
Sep 25 03:23:57 nativespace-cdp sshd[1907824]: Failed password for invalid user ubuntu from 123.23.118.38 port 47241 ssh2
Sep 25 03:23:58 nativespace-cdp sshd[1907857]: Failed password for invalid user test01 from 82.196.3.179 port 46384 ssh2
Sep 25 03:23:58 nativespace-cdp sshd[1907824]: Received disconnect from 123.23.118.38 port 47241:11: Bye Bye [preauth]
Sep 25 03:23:58 nativespace-cdp sshd[1907824]: Disconnected from 123.23.118.38 port 47241 [preauth]
Sep 25 03:24:09 nativespace-cdp sshd[1907921]: Invalid user odoo from 222.253.33.98 port 50616
Sep 25 03:24:09 nativespace-cdp sshd[1907921]: input_userauth_request: invalid user odoo [preauth]
Sep 25 03:24:09 nativespace-cdp sshd[1907921]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:24:09 nativespace-cdp sshd[1907921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.33.98
Sep 25 03:24:11 nativespace-cdp sshd[1907921]: Failed password for invalid user odoo from 222.253.33.98 port 50616 ssh2
Sep 25 03:24:11 nativespace-cdp sshd[1907921]: Received disconnect from 222.253.33.98 port 50616:11: Bye Bye [preauth]
Sep 25 03:24:11 nativespace-cdp sshd[1907921]: Disconnected from 222.253.33.98 port 50616 [preauth]
Sep 25 03:24:14 nativespace-cdp sshd[1907932]: Invalid user odoo from 103.107.91.91 port 49234
Sep 25 03:24:14 nativespace-cdp sshd[1907932]: input_userauth_request: invalid user odoo [preauth]
Sep 25 03:24:15 nativespace-cdp sshd[1907932]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:24:15 nativespace-cdp sshd[1907932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.91.91
Sep 25 03:24:17 nativespace-cdp sshd[1907932]: Failed password for invalid user odoo from 103.107.91.91 port 49234 ssh2
Sep 25 03:24:17 nativespace-cdp sshd[1907932]: Received disconnect from 103.107.91.91 port 49234:11: Bye Bye [preauth]
Sep 25 03:24:17 nativespace-cdp sshd[1907932]: Disconnected from 103.107.91.91 port 49234 [preauth]
Sep 25 03:24:44 nativespace-cdp sshd[1907990]: Invalid user tuan from 123.23.118.38 port 53574
Sep 25 03:24:44 nativespace-cdp sshd[1907990]: input_userauth_request: invalid user tuan [preauth]
Sep 25 03:24:44 nativespace-cdp sshd[1907990]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:24:44 nativespace-cdp sshd[1907990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.23.118.38
Sep 25 03:24:46 nativespace-cdp sshd[1907990]: Failed password for invalid user tuan from 123.23.118.38 port 53574 ssh2
Sep 25 03:24:46 nativespace-cdp sshd[1907990]: Received disconnect from 123.23.118.38 port 53574:11: Bye Bye [preauth]
Sep 25 03:24:46 nativespace-cdp sshd[1907990]: Disconnected from 123.23.118.38 port 53574 [preauth]
Sep 25 03:24:59 nativespace-cdp sshd[1908057]: Invalid user tomcat from 222.253.33.98 port 49604
Sep 25 03:24:59 nativespace-cdp sshd[1908057]: input_userauth_request: invalid user tomcat [preauth]
Sep 25 03:24:59 nativespace-cdp sshd[1908057]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:24:59 nativespace-cdp sshd[1908057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.33.98
Sep 25 03:25:01 nativespace-cdp sshd[1908057]: Failed password for invalid user tomcat from 222.253.33.98 port 49604 ssh2
Sep 25 03:25:01 nativespace-cdp sshd[1908057]: Received disconnect from 222.253.33.98 port 49604:11: Bye Bye [preauth]
Sep 25 03:25:01 nativespace-cdp sshd[1908057]: Disconnected from 222.253.33.98 port 49604 [preauth]
Sep 25 03:25:16 nativespace-cdp sshd[1908261]: Invalid user sshtunnel from 103.107.91.91 port 59100
Sep 25 03:25:16 nativespace-cdp sshd[1908261]: input_userauth_request: invalid user sshtunnel [preauth]
Sep 25 03:25:16 nativespace-cdp sshd[1908261]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 03:25:16 nativespace-cdp sshd[1908261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.91.91
Sep 25 03:25:18 nativespace-cdp sshd[1908261]: Failed password for invalid user sshtunnel from 103.107.91.91 port 59100 ssh2
Sep 25 03:25:18 nativespace-cdp sshd[1908261]: Received disconnect from 103.107.91.91 port 59100:11: Bye Bye [preauth]
Sep 25 03:25:18 nativespace-cdp sshd[1908261]: Disconnected from 103.107.91.91 port 59100 [preauth]
Sep 25 03:26:33 nativespace-cdp sshd[1908466]: Connection closed by 159.100.136.21 port 56430 [preauth]
Sep 25 03:31:35 nativespace-cdp sshd[1909826]: Connection closed by 159.100.136.21 port 37580 [preauth]
Sep 25 03:36:33 nativespace-cdp sshd[1910674]: Connection closed by 159.100.136.21 port 47370 [preauth]
Sep 25 03:41:35 nativespace-cdp sshd[1912156]: Connection closed by 159.100.136.21 port 56882 [preauth]
Sep 25 03:46:33 nativespace-cdp sshd[1913148]: Connection closed by 159.100.136.21 port 38246 [preauth]
Sep 25 03:51:33 nativespace-cdp sshd[1914162]: Connection closed by 159.100.136.21 port 47532 [preauth]
Sep 25 03:56:35 nativespace-cdp sshd[1915129]: Connection closed by 159.100.136.21 port 56838 [preauth]
Sep 25 04:01:33 nativespace-cdp sshd[1916433]: Connection closed by 159.100.136.21 port 37752 [preauth]
Sep 25 04:06:33 nativespace-cdp sshd[1917347]: Connection closed by 159.100.136.21 port 46830 [preauth]
Sep 25 04:11:33 nativespace-cdp sshd[1918409]: Connection closed by 159.100.136.21 port 56520 [preauth]
Sep 25 04:16:36 nativespace-cdp sshd[1919486]: Connection closed by 159.100.136.21 port 38248 [preauth]
Sep 25 04:21:33 nativespace-cdp sshd[1921024]: Connection closed by 159.100.136.21 port 47132 [preauth]
Sep 25 04:26:33 nativespace-cdp sshd[1922075]: Connection closed by 159.100.136.21 port 56822 [preauth]
Sep 25 04:31:33 nativespace-cdp sshd[1923656]: Connection closed by 159.100.136.21 port 37908 [preauth]
Sep 25 04:35:37 nativespace-cdp polkitd[421]: Loading rules from directory /etc/polkit-1/rules.d
Sep 25 04:35:37 nativespace-cdp polkitd[421]: Loading rules from directory /usr/share/polkit-1/rules.d
Sep 25 04:35:37 nativespace-cdp polkitd[421]: Finished loading, compiling and executing 2 rules
Sep 25 04:35:37 nativespace-cdp polkitd[421]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Sep 25 04:36:33 nativespace-cdp sshd[887]: Connection closed by 159.100.136.21 port 47816 [preauth]
Sep 25 04:41:33 nativespace-cdp sshd[2211]: Connection closed by 159.100.136.21 port 57124 [preauth]
Sep 25 04:46:33 nativespace-cdp sshd[3463]: Connection closed by 159.100.136.21 port 38610 [preauth]
Sep 25 04:51:33 nativespace-cdp sshd[4511]: Connection closed by 159.100.136.21 port 48122 [preauth]
Sep 25 04:56:33 nativespace-cdp sshd[5459]: Connection closed by 159.100.136.21 port 57710 [preauth]
Sep 25 04:56:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 25 04:56:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 05:01:33 nativespace-cdp sshd[6885]: Connection closed by 159.100.136.21 port 39058 [preauth]
Sep 25 05:06:33 nativespace-cdp sshd[7788]: Connection closed by 159.100.136.21 port 49200 [preauth]
Sep 25 05:11:35 nativespace-cdp sshd[8672]: Connection closed by 159.100.136.21 port 58126 [preauth]
Sep 25 05:12:32 nativespace-cdp sshd[8814]: Invalid user test_user from 186.118.142.216 port 38664
Sep 25 05:12:32 nativespace-cdp sshd[8814]: input_userauth_request: invalid user test_user [preauth]
Sep 25 05:12:32 nativespace-cdp sshd[8814]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:12:32 nativespace-cdp sshd[8814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.118.142.216
Sep 25 05:12:34 nativespace-cdp sshd[8814]: Failed password for invalid user test_user from 186.118.142.216 port 38664 ssh2
Sep 25 05:12:34 nativespace-cdp sshd[8814]: Received disconnect from 186.118.142.216 port 38664:11: Bye Bye [preauth]
Sep 25 05:12:34 nativespace-cdp sshd[8814]: Disconnected from 186.118.142.216 port 38664 [preauth]
Sep 25 05:12:53 nativespace-cdp sshd[8857]: Invalid user paul from 34.75.26.147 port 49326
Sep 25 05:12:53 nativespace-cdp sshd[8857]: input_userauth_request: invalid user paul [preauth]
Sep 25 05:12:53 nativespace-cdp sshd[8857]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:12:53 nativespace-cdp sshd[8857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.75.26.147
Sep 25 05:12:55 nativespace-cdp sshd[8857]: Failed password for invalid user paul from 34.75.26.147 port 49326 ssh2
Sep 25 05:12:55 nativespace-cdp sshd[8857]: Received disconnect from 34.75.26.147 port 49326:11: Bye Bye [preauth]
Sep 25 05:12:55 nativespace-cdp sshd[8857]: Disconnected from 34.75.26.147 port 49326 [preauth]
Sep 25 05:13:39 nativespace-cdp sshd[8949]: Invalid user ubuntu from 183.105.214.111 port 33474
Sep 25 05:13:39 nativespace-cdp sshd[8949]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 05:13:39 nativespace-cdp sshd[8949]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:13:39 nativespace-cdp sshd[8949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.105.214.111
Sep 25 05:13:41 nativespace-cdp sshd[8949]: Failed password for invalid user ubuntu from 183.105.214.111 port 33474 ssh2
Sep 25 05:13:42 nativespace-cdp sshd[8949]: Received disconnect from 183.105.214.111 port 33474:11: Bye Bye [preauth]
Sep 25 05:13:42 nativespace-cdp sshd[8949]: Disconnected from 183.105.214.111 port 33474 [preauth]
Sep 25 05:16:33 nativespace-cdp sshd[9878]: Connection closed by 159.100.136.21 port 39842 [preauth]
Sep 25 05:17:15 nativespace-cdp sshd[9988]: Received disconnect from 34.75.26.147 port 55970:11: Bye Bye [preauth]
Sep 25 05:17:15 nativespace-cdp sshd[9988]: Disconnected from 34.75.26.147 port 55970 [preauth]
Sep 25 05:17:19 nativespace-cdp sshd[10012]: Invalid user odoo from 186.118.142.216 port 40126
Sep 25 05:17:19 nativespace-cdp sshd[10012]: input_userauth_request: invalid user odoo [preauth]
Sep 25 05:17:19 nativespace-cdp sshd[10012]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:17:19 nativespace-cdp sshd[10012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.118.142.216
Sep 25 05:17:21 nativespace-cdp sshd[10012]: Failed password for invalid user odoo from 186.118.142.216 port 40126 ssh2
Sep 25 05:17:24 nativespace-cdp sshd[10012]: Received disconnect from 186.118.142.216 port 40126:11: Bye Bye [preauth]
Sep 25 05:17:24 nativespace-cdp sshd[10012]: Disconnected from 186.118.142.216 port 40126 [preauth]
Sep 25 05:17:37 nativespace-cdp sshd[10047]: Connection closed by 183.105.214.111 port 44046 [preauth]
Sep 25 05:17:48 nativespace-cdp sshd[10067]: Invalid user test from 34.75.26.147 port 54806
Sep 25 05:17:48 nativespace-cdp sshd[10067]: input_userauth_request: invalid user test [preauth]
Sep 25 05:17:48 nativespace-cdp sshd[10067]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:17:48 nativespace-cdp sshd[10067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.75.26.147
Sep 25 05:17:50 nativespace-cdp sshd[10067]: Failed password for invalid user test from 34.75.26.147 port 54806 ssh2
Sep 25 05:17:50 nativespace-cdp sshd[10067]: Received disconnect from 34.75.26.147 port 54806:11: Bye Bye [preauth]
Sep 25 05:17:50 nativespace-cdp sshd[10067]: Disconnected from 34.75.26.147 port 54806 [preauth]
Sep 25 05:18:06 nativespace-cdp sshd[10114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.118.142.216  user=root
Sep 25 05:18:06 nativespace-cdp sshd[10114]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 05:18:08 nativespace-cdp sshd[10114]: Failed password for root from 186.118.142.216 port 55558 ssh2
Sep 25 05:18:08 nativespace-cdp sshd[10114]: Received disconnect from 186.118.142.216 port 55558:11: Bye Bye [preauth]
Sep 25 05:18:08 nativespace-cdp sshd[10114]: Disconnected from 186.118.142.216 port 55558 [preauth]
Sep 25 05:18:24 nativespace-cdp sshd[10189]: Invalid user nexus from 34.75.26.147 port 52348
Sep 25 05:18:24 nativespace-cdp sshd[10189]: input_userauth_request: invalid user nexus [preauth]
Sep 25 05:18:24 nativespace-cdp sshd[10189]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:18:24 nativespace-cdp sshd[10189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.75.26.147
Sep 25 05:18:26 nativespace-cdp sshd[10189]: Failed password for invalid user nexus from 34.75.26.147 port 52348 ssh2
Sep 25 05:18:29 nativespace-cdp sshd[10189]: Received disconnect from 34.75.26.147 port 52348:11: Bye Bye [preauth]
Sep 25 05:18:29 nativespace-cdp sshd[10189]: Disconnected from 34.75.26.147 port 52348 [preauth]
Sep 25 05:18:48 nativespace-cdp sshd[10258]: Invalid user odoo from 183.105.214.111 port 59856
Sep 25 05:18:48 nativespace-cdp sshd[10258]: input_userauth_request: invalid user odoo [preauth]
Sep 25 05:18:48 nativespace-cdp sshd[10258]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:18:48 nativespace-cdp sshd[10258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.105.214.111
Sep 25 05:18:50 nativespace-cdp sshd[10258]: Failed password for invalid user odoo from 183.105.214.111 port 59856 ssh2
Sep 25 05:18:52 nativespace-cdp sshd[10258]: Received disconnect from 183.105.214.111 port 59856:11: Bye Bye [preauth]
Sep 25 05:18:52 nativespace-cdp sshd[10258]: Disconnected from 183.105.214.111 port 59856 [preauth]
Sep 25 05:19:37 nativespace-cdp sshd[10397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.105.214.111  user=root
Sep 25 05:19:37 nativespace-cdp sshd[10397]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 05:19:39 nativespace-cdp sshd[10397]: Failed password for root from 183.105.214.111 port 40720 ssh2
Sep 25 05:21:33 nativespace-cdp sshd[10896]: Connection closed by 159.100.136.21 port 49382 [preauth]
Sep 25 05:26:33 nativespace-cdp sshd[11775]: Connection closed by 159.100.136.21 port 58890 [preauth]
Sep 25 05:31:33 nativespace-cdp sshd[12765]: Connection closed by 159.100.136.21 port 39888 [preauth]
Sep 25 05:35:12 nativespace-cdp su: pam_unix(su:session): session opened for user belle by (uid=0)
Sep 25 05:35:13 nativespace-cdp su[13725]: pam_unix(su:session): session closed for user belle
Sep 25 05:36:33 nativespace-cdp sshd[14027]: Connection closed by 159.100.136.21 port 49384 [preauth]
Sep 25 05:41:33 nativespace-cdp sshd[16081]: Connection closed by 159.100.136.21 port 59060 [preauth]
Sep 25 05:46:34 nativespace-cdp sshd[17960]: Connection closed by 159.100.136.21 port 40502 [preauth]
Sep 25 05:50:54 nativespace-cdp sshd[19223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.87.199  user=root
Sep 25 05:50:54 nativespace-cdp sshd[19223]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 05:50:56 nativespace-cdp sshd[19223]: Failed password for root from 51.222.87.199 port 48568 ssh2
Sep 25 05:50:56 nativespace-cdp sshd[19223]: Received disconnect from 51.222.87.199 port 48568:11: Bye Bye [preauth]
Sep 25 05:50:56 nativespace-cdp sshd[19223]: Disconnected from 51.222.87.199 port 48568 [preauth]
Sep 25 05:51:33 nativespace-cdp sshd[19351]: Connection closed by 159.100.136.21 port 50192 [preauth]
Sep 25 05:53:08 nativespace-cdp sshd[19587]: Invalid user sopuser from 146.59.80.142 port 58136
Sep 25 05:53:08 nativespace-cdp sshd[19587]: input_userauth_request: invalid user sopuser [preauth]
Sep 25 05:53:09 nativespace-cdp sshd[19587]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:53:09 nativespace-cdp sshd[19587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.59.80.142
Sep 25 05:53:11 nativespace-cdp sshd[19587]: Failed password for invalid user sopuser from 146.59.80.142 port 58136 ssh2
Sep 25 05:53:11 nativespace-cdp sshd[19587]: Received disconnect from 146.59.80.142 port 58136:11: Bye Bye [preauth]
Sep 25 05:53:11 nativespace-cdp sshd[19587]: Disconnected from 146.59.80.142 port 58136 [preauth]
Sep 25 05:56:14 nativespace-cdp sshd[20232]: Invalid user test from 96.126.127.169 port 46656
Sep 25 05:56:14 nativespace-cdp sshd[20232]: input_userauth_request: invalid user test [preauth]
Sep 25 05:56:14 nativespace-cdp sshd[20232]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:56:14 nativespace-cdp sshd[20232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.126.127.169
Sep 25 05:56:16 nativespace-cdp sshd[20232]: Failed password for invalid user test from 96.126.127.169 port 46656 ssh2
Sep 25 05:56:16 nativespace-cdp sshd[20232]: Received disconnect from 96.126.127.169 port 46656:11: Bye Bye [preauth]
Sep 25 05:56:16 nativespace-cdp sshd[20232]: Disconnected from 96.126.127.169 port 46656 [preauth]
Sep 25 05:56:33 nativespace-cdp sshd[20278]: Connection closed by 159.100.136.21 port 59752 [preauth]
Sep 25 05:57:11 nativespace-cdp sshd[20381]: Invalid user test from 51.222.87.199 port 48286
Sep 25 05:57:11 nativespace-cdp sshd[20381]: input_userauth_request: invalid user test [preauth]
Sep 25 05:57:12 nativespace-cdp sshd[20381]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:57:12 nativespace-cdp sshd[20381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.87.199
Sep 25 05:57:13 nativespace-cdp sshd[20381]: Failed password for invalid user test from 51.222.87.199 port 48286 ssh2
Sep 25 05:57:13 nativespace-cdp sshd[20381]: Received disconnect from 51.222.87.199 port 48286:11: Bye Bye [preauth]
Sep 25 05:57:13 nativespace-cdp sshd[20381]: Disconnected from 51.222.87.199 port 48286 [preauth]
Sep 25 05:57:26 nativespace-cdp sshd[20409]: Invalid user sysadmin from 146.59.80.142 port 55570
Sep 25 05:57:26 nativespace-cdp sshd[20409]: input_userauth_request: invalid user sysadmin [preauth]
Sep 25 05:57:26 nativespace-cdp sshd[20409]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:57:26 nativespace-cdp sshd[20409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.59.80.142
Sep 25 05:57:28 nativespace-cdp sshd[20409]: Failed password for invalid user sysadmin from 146.59.80.142 port 55570 ssh2
Sep 25 05:57:28 nativespace-cdp sshd[20409]: Received disconnect from 146.59.80.142 port 55570:11: Bye Bye [preauth]
Sep 25 05:57:28 nativespace-cdp sshd[20409]: Disconnected from 146.59.80.142 port 55570 [preauth]
Sep 25 05:57:51 nativespace-cdp sshd[20468]: Invalid user tuan from 51.222.87.199 port 52664
Sep 25 05:57:51 nativespace-cdp sshd[20468]: input_userauth_request: invalid user tuan [preauth]
Sep 25 05:57:51 nativespace-cdp sshd[20468]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:57:51 nativespace-cdp sshd[20468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.87.199
Sep 25 05:57:53 nativespace-cdp sshd[20468]: Failed password for invalid user tuan from 51.222.87.199 port 52664 ssh2
Sep 25 05:58:09 nativespace-cdp sshd[20550]: Invalid user support from 96.126.127.169 port 59962
Sep 25 05:58:09 nativespace-cdp sshd[20550]: input_userauth_request: invalid user support [preauth]
Sep 25 05:58:09 nativespace-cdp sshd[20550]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:58:09 nativespace-cdp sshd[20550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.126.127.169
Sep 25 05:58:10 nativespace-cdp sshd[20554]: Invalid user tuan from 146.59.80.142 port 39408
Sep 25 05:58:10 nativespace-cdp sshd[20554]: input_userauth_request: invalid user tuan [preauth]
Sep 25 05:58:10 nativespace-cdp sshd[20554]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:58:10 nativespace-cdp sshd[20554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.59.80.142
Sep 25 05:58:11 nativespace-cdp sshd[20550]: Failed password for invalid user support from 96.126.127.169 port 59962 ssh2
Sep 25 05:58:11 nativespace-cdp sshd[20550]: Received disconnect from 96.126.127.169 port 59962:11: Bye Bye [preauth]
Sep 25 05:58:11 nativespace-cdp sshd[20550]: Disconnected from 96.126.127.169 port 59962 [preauth]
Sep 25 05:58:12 nativespace-cdp sshd[20554]: Failed password for invalid user tuan from 146.59.80.142 port 39408 ssh2
Sep 25 05:58:46 nativespace-cdp sshd[20728]: Invalid user testuser from 96.126.127.169 port 35030
Sep 25 05:58:46 nativespace-cdp sshd[20728]: input_userauth_request: invalid user testuser [preauth]
Sep 25 05:58:46 nativespace-cdp sshd[20728]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 05:58:46 nativespace-cdp sshd[20728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.126.127.169
Sep 25 05:58:48 nativespace-cdp sshd[20728]: Failed password for invalid user testuser from 96.126.127.169 port 35030 ssh2
Sep 25 06:01:33 nativespace-cdp sshd[21664]: Connection closed by 159.100.136.21 port 41094 [preauth]
Sep 25 06:06:35 nativespace-cdp sshd[22632]: Connection closed by 159.100.136.21 port 50636 [preauth]
Sep 25 06:11:33 nativespace-cdp sshd[23810]: Connection closed by 159.100.136.21 port 59408 [preauth]
Sep 25 06:16:35 nativespace-cdp sshd[25165]: Connection closed by 159.100.136.21 port 40526 [preauth]
Sep 25 06:21:36 nativespace-cdp sshd[26218]: Connection closed by 159.100.136.21 port 49192 [preauth]
Sep 25 06:26:33 nativespace-cdp sshd[27138]: Connection closed by 159.100.136.21 port 58072 [preauth]
Sep 25 06:31:36 nativespace-cdp sshd[28442]: Connection closed by 159.100.136.21 port 38786 [preauth]
Sep 25 06:36:33 nativespace-cdp sshd[29385]: Connection closed by 159.100.136.21 port 48272 [preauth]
Sep 25 06:41:33 nativespace-cdp sshd[30312]: Connection closed by 159.100.136.21 port 57770 [preauth]
Sep 25 06:46:34 nativespace-cdp sshd[31692]: Connection closed by 159.100.136.21 port 38890 [preauth]
Sep 25 06:51:33 nativespace-cdp sshd[32604]: Connection closed by 159.100.136.21 port 47790 [preauth]
Sep 25 06:56:36 nativespace-cdp sshd[1092]: Connection closed by 159.100.136.21 port 57506 [preauth]
Sep 25 06:59:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 06:59:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 06:59:08 nativespace-cdp sudo[1810]: pam_unix(sudo:session): session closed for user root
Sep 25 07:01:33 nativespace-cdp sshd[2475]: Connection closed by 159.100.136.21 port 38190 [preauth]
Sep 25 07:06:33 nativespace-cdp sshd[3670]: Connection closed by 159.100.136.21 port 48034 [preauth]
Sep 25 07:11:34 nativespace-cdp sshd[4763]: Connection closed by 159.100.136.21 port 57222 [preauth]
Sep 25 07:16:34 nativespace-cdp sshd[6090]: Connection closed by 159.100.136.21 port 38958 [preauth]
Sep 25 07:21:33 nativespace-cdp sshd[7027]: Connection closed by 159.100.136.21 port 48728 [preauth]
Sep 25 07:26:33 nativespace-cdp sshd[7908]: Connection closed by 159.100.136.21 port 58570 [preauth]
Sep 25 07:31:33 nativespace-cdp sshd[9259]: Connection closed by 159.100.136.21 port 40112 [preauth]
Sep 25 07:36:34 nativespace-cdp sshd[10304]: Connection closed by 159.100.136.21 port 49588 [preauth]
Sep 25 07:41:36 nativespace-cdp sshd[11389]: Connection closed by 159.100.136.21 port 58254 [preauth]
Sep 25 07:46:33 nativespace-cdp sshd[12790]: Connection closed by 159.100.136.21 port 39742 [preauth]
Sep 25 07:51:35 nativespace-cdp sshd[13753]: Connection closed by 159.100.136.21 port 48342 [preauth]
Sep 25 07:56:34 nativespace-cdp sshd[14790]: Connection closed by 159.100.136.21 port 58250 [preauth]
Sep 25 08:01:36 nativespace-cdp sshd[16177]: Connection closed by 159.100.136.21 port 37990 [preauth]
Sep 25 08:06:33 nativespace-cdp sshd[17268]: Connection closed by 159.100.136.21 port 46890 [preauth]
Sep 25 08:11:36 nativespace-cdp sshd[18286]: Connection closed by 159.100.136.21 port 56466 [preauth]
Sep 25 08:16:35 nativespace-cdp sshd[19687]: Connection closed by 159.100.136.21 port 37764 [preauth]
Sep 25 08:18:54 nativespace-cdp sshd[20082]: Invalid user iptv from 191.55.188.92 port 24320
Sep 25 08:18:54 nativespace-cdp sshd[20082]: input_userauth_request: invalid user iptv [preauth]
Sep 25 08:18:54 nativespace-cdp sshd[20082]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 08:18:54 nativespace-cdp sshd[20082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.55.188.92
Sep 25 08:18:56 nativespace-cdp sshd[20082]: Failed password for invalid user iptv from 191.55.188.92 port 24320 ssh2
Sep 25 08:18:57 nativespace-cdp sshd[20082]: Received disconnect from 191.55.188.92 port 24320:11: Bye Bye [preauth]
Sep 25 08:18:57 nativespace-cdp sshd[20082]: Disconnected from 191.55.188.92 port 24320 [preauth]
Sep 25 08:20:22 nativespace-cdp sshd[20444]: Invalid user server from 147.182.130.152 port 32926
Sep 25 08:20:22 nativespace-cdp sshd[20444]: input_userauth_request: invalid user server [preauth]
Sep 25 08:20:22 nativespace-cdp sshd[20444]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 08:20:22 nativespace-cdp sshd[20444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.182.130.152
Sep 25 08:20:24 nativespace-cdp sshd[20444]: Failed password for invalid user server from 147.182.130.152 port 32926 ssh2
Sep 25 08:20:24 nativespace-cdp sshd[20444]: Received disconnect from 147.182.130.152 port 32926:11: Bye Bye [preauth]
Sep 25 08:20:24 nativespace-cdp sshd[20444]: Disconnected from 147.182.130.152 port 32926 [preauth]
Sep 25 08:21:33 nativespace-cdp sshd[20712]: Connection closed by 159.100.136.21 port 46908 [preauth]
Sep 25 08:22:40 nativespace-cdp sshd[20912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.182.130.152  user=root
Sep 25 08:22:40 nativespace-cdp sshd[20912]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 08:22:42 nativespace-cdp sshd[20912]: Failed password for root from 147.182.130.152 port 41090 ssh2
Sep 25 08:22:47 nativespace-cdp sshd[20912]: Received disconnect from 147.182.130.152 port 41090:11: Bye Bye [preauth]
Sep 25 08:22:47 nativespace-cdp sshd[20912]: Disconnected from 147.182.130.152 port 41090 [preauth]
Sep 25 08:23:14 nativespace-cdp sshd[21027]: Invalid user steam from 147.182.130.152 port 52558
Sep 25 08:23:14 nativespace-cdp sshd[21027]: input_userauth_request: invalid user steam [preauth]
Sep 25 08:23:14 nativespace-cdp sshd[21027]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 08:23:14 nativespace-cdp sshd[21027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.182.130.152
Sep 25 08:23:16 nativespace-cdp sshd[21027]: Failed password for invalid user steam from 147.182.130.152 port 52558 ssh2
Sep 25 08:23:20 nativespace-cdp sshd[21027]: Received disconnect from 147.182.130.152 port 52558:11: Bye Bye [preauth]
Sep 25 08:23:20 nativespace-cdp sshd[21027]: Disconnected from 147.182.130.152 port 52558 [preauth]
Sep 25 08:23:20 nativespace-cdp sshd[21027]: Disconnected from 147.182.130.152 port 52558 [preauth]
Sep 25 08:23:58 nativespace-cdp sshd[21177]: Received disconnect from 191.55.188.92 port 65289:11: Bye Bye [preauth]
Sep 25 08:23:58 nativespace-cdp sshd[21177]: Disconnected from 191.55.188.92 port 65289 [preauth]
Sep 25 08:25:10 nativespace-cdp sshd[21541]: Received disconnect from 191.55.188.92 port 56696:11: Bye Bye [preauth]
Sep 25 08:25:10 nativespace-cdp sshd[21541]: Disconnected from 191.55.188.92 port 56696 [preauth]
Sep 25 08:26:18 nativespace-cdp sshd[21865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.55.188.92  user=mysql
Sep 25 08:26:18 nativespace-cdp sshd[21865]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "mysql"
Sep 25 08:26:20 nativespace-cdp sshd[21865]: Failed password for mysql from 191.55.188.92 port 24194 ssh2
Sep 25 08:26:20 nativespace-cdp sshd[21865]: Received disconnect from 191.55.188.92 port 24194:11: Bye Bye [preauth]
Sep 25 08:26:20 nativespace-cdp sshd[21865]: Disconnected from 191.55.188.92 port 24194 [preauth]
Sep 25 08:26:33 nativespace-cdp sshd[21918]: Connection closed by 159.100.136.21 port 55684 [preauth]
Sep 25 08:27:12 nativespace-cdp sshd[22037]: Invalid user oracle from 191.55.188.92 port 55578
Sep 25 08:27:12 nativespace-cdp sshd[22037]: input_userauth_request: invalid user oracle [preauth]
Sep 25 08:27:12 nativespace-cdp sshd[22037]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 08:27:12 nativespace-cdp sshd[22037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.55.188.92
Sep 25 08:27:15 nativespace-cdp sshd[22037]: Failed password for invalid user oracle from 191.55.188.92 port 55578 ssh2
Sep 25 08:31:33 nativespace-cdp sshd[23352]: Connection closed by 159.100.136.21 port 35720 [preauth]
Sep 25 08:36:33 nativespace-cdp sshd[24443]: Connection closed by 159.100.136.21 port 45208 [preauth]
Sep 25 08:41:33 nativespace-cdp sshd[25483]: Connection closed by 159.100.136.21 port 53954 [preauth]
Sep 25 08:46:37 nativespace-cdp sshd[26836]: Connection closed by 159.100.136.21 port 35028 [preauth]
Sep 25 08:51:33 nativespace-cdp sshd[27880]: Connection closed by 159.100.136.21 port 44298 [preauth]
Sep 25 08:52:44 nativespace-cdp sshd[28067]: Invalid user adminftp from 51.89.165.94 port 38996
Sep 25 08:52:45 nativespace-cdp sshd[28067]: input_userauth_request: invalid user adminftp [preauth]
Sep 25 08:52:45 nativespace-cdp sshd[28067]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 08:52:45 nativespace-cdp sshd[28067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.165.94
Sep 25 08:52:47 nativespace-cdp sshd[28067]: Failed password for invalid user adminftp from 51.89.165.94 port 38996 ssh2
Sep 25 08:52:47 nativespace-cdp sshd[28067]: Received disconnect from 51.89.165.94 port 38996:11: Bye Bye [preauth]
Sep 25 08:52:47 nativespace-cdp sshd[28067]: Disconnected from 51.89.165.94 port 38996 [preauth]
Sep 25 08:55:02 nativespace-cdp sshd[28477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.165.94  user=root
Sep 25 08:55:02 nativespace-cdp sshd[28477]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 08:55:04 nativespace-cdp sshd[28477]: Failed password for root from 51.89.165.94 port 35294 ssh2
Sep 25 08:55:08 nativespace-cdp sshd[28477]: Received disconnect from 51.89.165.94 port 35294:11: Bye Bye [preauth]
Sep 25 08:55:08 nativespace-cdp sshd[28477]: Disconnected from 51.89.165.94 port 35294 [preauth]
Sep 25 08:55:42 nativespace-cdp sshd[28665]: Invalid user admin from 51.89.165.94 port 50542
Sep 25 08:55:42 nativespace-cdp sshd[28665]: input_userauth_request: invalid user admin [preauth]
Sep 25 08:55:42 nativespace-cdp sshd[28665]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 08:55:42 nativespace-cdp sshd[28665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.165.94
Sep 25 08:55:44 nativespace-cdp sshd[28665]: Failed password for invalid user admin from 51.89.165.94 port 50542 ssh2
Sep 25 08:55:44 nativespace-cdp sshd[28665]: Received disconnect from 51.89.165.94 port 50542:11: Bye Bye [preauth]
Sep 25 08:55:44 nativespace-cdp sshd[28665]: Disconnected from 51.89.165.94 port 50542 [preauth]
Sep 25 08:56:33 nativespace-cdp sshd[28811]: Connection closed by 159.100.136.21 port 52780 [preauth]
Sep 25 09:01:34 nativespace-cdp sshd[30412]: Connection closed by 159.100.136.21 port 34024 [preauth]
Sep 25 09:06:33 nativespace-cdp sshd[31588]: Connection closed by 159.100.136.21 port 43484 [preauth]
Sep 25 09:11:34 nativespace-cdp sshd[32612]: Connection closed by 159.100.136.21 port 53016 [preauth]
Sep 25 09:16:33 nativespace-cdp sshd[1626]: Connection closed by 159.100.136.21 port 33726 [preauth]
Sep 25 09:21:34 nativespace-cdp sshd[2755]: Connection closed by 159.100.136.21 port 43110 [preauth]
Sep 25 09:26:33 nativespace-cdp sshd[3743]: Connection closed by 159.100.136.21 port 52870 [preauth]
Sep 25 09:31:33 nativespace-cdp sshd[5214]: Connection closed by 159.100.136.21 port 34296 [preauth]
Sep 25 09:34:34 nativespace-cdp sshd[5811]: Invalid user deploy from 138.197.136.18 port 50830
Sep 25 09:34:34 nativespace-cdp sshd[5811]: input_userauth_request: invalid user deploy [preauth]
Sep 25 09:34:34 nativespace-cdp sshd[5811]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:34:34 nativespace-cdp sshd[5811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.136.18
Sep 25 09:34:36 nativespace-cdp sshd[5811]: Failed password for invalid user deploy from 138.197.136.18 port 50830 ssh2
Sep 25 09:34:38 nativespace-cdp sshd[5811]: Received disconnect from 138.197.136.18 port 50830:11: Bye Bye [preauth]
Sep 25 09:34:38 nativespace-cdp sshd[5811]: Disconnected from 138.197.136.18 port 50830 [preauth]
Sep 25 09:35:38 nativespace-cdp sshd[6149]: Invalid user test from 167.99.237.61 port 46822
Sep 25 09:35:38 nativespace-cdp sshd[6149]: input_userauth_request: invalid user test [preauth]
Sep 25 09:35:38 nativespace-cdp sshd[6149]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:35:38 nativespace-cdp sshd[6149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61
Sep 25 09:35:40 nativespace-cdp sshd[6149]: Failed password for invalid user test from 167.99.237.61 port 46822 ssh2
Sep 25 09:35:41 nativespace-cdp sshd[6149]: Received disconnect from 167.99.237.61 port 46822:11: Bye Bye [preauth]
Sep 25 09:35:41 nativespace-cdp sshd[6149]: Disconnected from 167.99.237.61 port 46822 [preauth]
Sep 25 09:36:33 nativespace-cdp sshd[6354]: Connection closed by 159.100.136.21 port 43556 [preauth]
Sep 25 09:36:59 nativespace-cdp sshd[6427]: Invalid user test from 101.36.127.102 port 34760
Sep 25 09:36:59 nativespace-cdp sshd[6427]: input_userauth_request: invalid user test [preauth]
Sep 25 09:36:59 nativespace-cdp sshd[6427]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:36:59 nativespace-cdp sshd[6427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.127.102
Sep 25 09:37:02 nativespace-cdp sshd[6427]: Failed password for invalid user test from 101.36.127.102 port 34760 ssh2
Sep 25 09:37:03 nativespace-cdp sshd[6427]: Received disconnect from 101.36.127.102 port 34760:11: Bye Bye [preauth]
Sep 25 09:37:03 nativespace-cdp sshd[6427]: Disconnected from 101.36.127.102 port 34760 [preauth]
Sep 25 09:37:09 nativespace-cdp sshd[6463]: Invalid user test from 196.0.120.211 port 57216
Sep 25 09:37:09 nativespace-cdp sshd[6463]: input_userauth_request: invalid user test [preauth]
Sep 25 09:37:09 nativespace-cdp sshd[6463]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:37:09 nativespace-cdp sshd[6463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.0.120.211
Sep 25 09:37:10 nativespace-cdp sshd[6463]: Failed password for invalid user test from 196.0.120.211 port 57216 ssh2
Sep 25 09:37:14 nativespace-cdp sshd[6463]: Received disconnect from 196.0.120.211 port 57216:11: Bye Bye [preauth]
Sep 25 09:37:14 nativespace-cdp sshd[6463]: Disconnected from 196.0.120.211 port 57216 [preauth]
Sep 25 09:37:28 nativespace-cdp sshd[6530]: Invalid user test01 from 138.68.148.139 port 39510
Sep 25 09:37:28 nativespace-cdp sshd[6530]: input_userauth_request: invalid user test01 [preauth]
Sep 25 09:37:28 nativespace-cdp sshd[6530]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:37:28 nativespace-cdp sshd[6530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.139
Sep 25 09:37:30 nativespace-cdp sshd[6524]: Did not receive identification string from 199.45.155.86 port 40724
Sep 25 09:37:31 nativespace-cdp sshd[6530]: Failed password for invalid user test01 from 138.68.148.139 port 39510 ssh2
Sep 25 09:37:31 nativespace-cdp sshd[6530]: Received disconnect from 138.68.148.139 port 39510:11: Bye Bye [preauth]
Sep 25 09:37:31 nativespace-cdp sshd[6530]: Disconnected from 138.68.148.139 port 39510 [preauth]
Sep 25 09:37:49 nativespace-cdp sshd[6551]: Connection closed by 199.45.155.86 port 58024 [preauth]
Sep 25 09:38:11 nativespace-cdp sshd[6702]: Invalid user ubuntu from 47.242.188.92 port 41804
Sep 25 09:38:11 nativespace-cdp sshd[6702]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 09:38:11 nativespace-cdp sshd[6702]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:38:11 nativespace-cdp sshd[6702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.242.188.92
Sep 25 09:38:12 nativespace-cdp sshd[6708]: Invalid user support from 81.192.87.130 port 31158
Sep 25 09:38:12 nativespace-cdp sshd[6708]: input_userauth_request: invalid user support [preauth]
Sep 25 09:38:12 nativespace-cdp sshd[6708]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:38:12 nativespace-cdp sshd[6708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.87.130
Sep 25 09:38:13 nativespace-cdp sshd[6702]: Failed password for invalid user ubuntu from 47.242.188.92 port 41804 ssh2
Sep 25 09:38:13 nativespace-cdp sshd[6702]: Received disconnect from 47.242.188.92 port 41804:11: Bye Bye [preauth]
Sep 25 09:38:13 nativespace-cdp sshd[6702]: Disconnected from 47.242.188.92 port 41804 [preauth]
Sep 25 09:38:14 nativespace-cdp sshd[6708]: Failed password for invalid user support from 81.192.87.130 port 31158 ssh2
Sep 25 09:38:16 nativespace-cdp sshd[6708]: Received disconnect from 81.192.87.130 port 31158:11: Bye Bye [preauth]
Sep 25 09:38:16 nativespace-cdp sshd[6708]: Disconnected from 81.192.87.130 port 31158 [preauth]
Sep 25 09:39:30 nativespace-cdp sshd[6971]: Invalid user user from 171.244.37.103 port 58382
Sep 25 09:39:30 nativespace-cdp sshd[6971]: input_userauth_request: invalid user user [preauth]
Sep 25 09:39:30 nativespace-cdp sshd[6971]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:39:30 nativespace-cdp sshd[6971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.103
Sep 25 09:39:32 nativespace-cdp sshd[6971]: Failed password for invalid user user from 171.244.37.103 port 58382 ssh2
Sep 25 09:39:32 nativespace-cdp sshd[6971]: Received disconnect from 171.244.37.103 port 58382:11: Bye Bye [preauth]
Sep 25 09:39:32 nativespace-cdp sshd[6971]: Disconnected from 171.244.37.103 port 58382 [preauth]
Sep 25 09:40:40 nativespace-cdp sshd[7312]: Invalid user test from 167.99.237.61 port 40544
Sep 25 09:40:40 nativespace-cdp sshd[7312]: input_userauth_request: invalid user test [preauth]
Sep 25 09:40:40 nativespace-cdp sshd[7312]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:40:40 nativespace-cdp sshd[7312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61
Sep 25 09:40:41 nativespace-cdp sshd[7319]: Invalid user sysadmin from 138.197.136.18 port 58216
Sep 25 09:40:41 nativespace-cdp sshd[7319]: input_userauth_request: invalid user sysadmin [preauth]
Sep 25 09:40:41 nativespace-cdp sshd[7319]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:40:41 nativespace-cdp sshd[7319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.136.18
Sep 25 09:40:42 nativespace-cdp sshd[7312]: Failed password for invalid user test from 167.99.237.61 port 40544 ssh2
Sep 25 09:40:42 nativespace-cdp sshd[7312]: Received disconnect from 167.99.237.61 port 40544:11: Bye Bye [preauth]
Sep 25 09:40:42 nativespace-cdp sshd[7312]: Disconnected from 167.99.237.61 port 40544 [preauth]
Sep 25 09:40:43 nativespace-cdp sshd[7319]: Failed password for invalid user sysadmin from 138.197.136.18 port 58216 ssh2
Sep 25 09:40:43 nativespace-cdp sshd[7319]: Received disconnect from 138.197.136.18 port 58216:11: Bye Bye [preauth]
Sep 25 09:40:43 nativespace-cdp sshd[7319]: Disconnected from 138.197.136.18 port 58216 [preauth]
Sep 25 09:40:43 nativespace-cdp sshd[7333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.87.130  user=root
Sep 25 09:40:43 nativespace-cdp sshd[7333]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 09:40:45 nativespace-cdp sshd[7333]: Failed password for root from 81.192.87.130 port 46285 ssh2
Sep 25 09:40:45 nativespace-cdp sshd[7333]: Received disconnect from 81.192.87.130 port 46285:11: Bye Bye [preauth]
Sep 25 09:40:45 nativespace-cdp sshd[7333]: Disconnected from 81.192.87.130 port 46285 [preauth]
Sep 25 09:40:49 nativespace-cdp sshd[7357]: Invalid user test from 138.68.148.139 port 35794
Sep 25 09:40:49 nativespace-cdp sshd[7357]: input_userauth_request: invalid user test [preauth]
Sep 25 09:40:49 nativespace-cdp sshd[7357]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:40:49 nativespace-cdp sshd[7357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.139
Sep 25 09:40:51 nativespace-cdp sshd[7357]: Failed password for invalid user test from 138.68.148.139 port 35794 ssh2
Sep 25 09:40:51 nativespace-cdp sshd[7357]: Received disconnect from 138.68.148.139 port 35794:11: Bye Bye [preauth]
Sep 25 09:40:51 nativespace-cdp sshd[7357]: Disconnected from 138.68.148.139 port 35794 [preauth]
Sep 25 09:41:06 nativespace-cdp sshd[7409]: Invalid user deploy from 101.36.127.102 port 34922
Sep 25 09:41:06 nativespace-cdp sshd[7409]: input_userauth_request: invalid user deploy [preauth]
Sep 25 09:41:06 nativespace-cdp sshd[7409]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:41:06 nativespace-cdp sshd[7409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.127.102
Sep 25 09:41:08 nativespace-cdp sshd[7409]: Failed password for invalid user deploy from 101.36.127.102 port 34922 ssh2
Sep 25 09:41:10 nativespace-cdp sshd[7409]: Received disconnect from 101.36.127.102 port 34922:11: Bye Bye [preauth]
Sep 25 09:41:10 nativespace-cdp sshd[7409]: Disconnected from 101.36.127.102 port 34922 [preauth]
Sep 25 09:41:16 nativespace-cdp sshd[7437]: Invalid user ubuntu from 196.0.120.211 port 39772
Sep 25 09:41:16 nativespace-cdp sshd[7437]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 09:41:16 nativespace-cdp sshd[7437]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:41:16 nativespace-cdp sshd[7437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.0.120.211
Sep 25 09:41:16 nativespace-cdp sshd[7441]: Invalid user sysadmin from 167.99.237.61 port 53294
Sep 25 09:41:16 nativespace-cdp sshd[7441]: input_userauth_request: invalid user sysadmin [preauth]
Sep 25 09:41:16 nativespace-cdp sshd[7441]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:41:16 nativespace-cdp sshd[7441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61
Sep 25 09:41:18 nativespace-cdp sshd[7437]: Failed password for invalid user ubuntu from 196.0.120.211 port 39772 ssh2
Sep 25 09:41:19 nativespace-cdp sshd[7441]: Failed password for invalid user sysadmin from 167.99.237.61 port 53294 ssh2
Sep 25 09:41:20 nativespace-cdp sshd[7437]: Received disconnect from 196.0.120.211 port 39772:11: Bye Bye [preauth]
Sep 25 09:41:20 nativespace-cdp sshd[7437]: Disconnected from 196.0.120.211 port 39772 [preauth]
Sep 25 09:41:21 nativespace-cdp sshd[7441]: Received disconnect from 167.99.237.61 port 53294:11: Bye Bye [preauth]
Sep 25 09:41:21 nativespace-cdp sshd[7441]: Disconnected from 167.99.237.61 port 53294 [preauth]
Sep 25 09:41:21 nativespace-cdp sshd[7458]: Invalid user testuser from 138.197.136.18 port 35348
Sep 25 09:41:21 nativespace-cdp sshd[7458]: input_userauth_request: invalid user testuser [preauth]
Sep 25 09:41:21 nativespace-cdp sshd[7458]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:41:21 nativespace-cdp sshd[7458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.136.18
Sep 25 09:41:24 nativespace-cdp sshd[7458]: Failed password for invalid user testuser from 138.197.136.18 port 35348 ssh2
Sep 25 09:41:24 nativespace-cdp sshd[7458]: Received disconnect from 138.197.136.18 port 35348:11: Bye Bye [preauth]
Sep 25 09:41:24 nativespace-cdp sshd[7458]: Disconnected from 138.197.136.18 port 35348 [preauth]
Sep 25 09:41:33 nativespace-cdp sshd[7525]: Connection closed by 159.100.136.21 port 52230 [preauth]
Sep 25 09:41:33 nativespace-cdp sshd[7523]: Invalid user user from 81.192.87.130 port 53739
Sep 25 09:41:33 nativespace-cdp sshd[7523]: input_userauth_request: invalid user user [preauth]
Sep 25 09:41:33 nativespace-cdp sshd[7523]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:41:33 nativespace-cdp sshd[7523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.87.130
Sep 25 09:41:34 nativespace-cdp sshd[7607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.139  user=root
Sep 25 09:41:34 nativespace-cdp sshd[7607]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 09:41:35 nativespace-cdp sshd[7523]: Failed password for invalid user user from 81.192.87.130 port 53739 ssh2
Sep 25 09:41:35 nativespace-cdp sshd[7609]: Invalid user tg from 171.244.37.103 port 47402
Sep 25 09:41:35 nativespace-cdp sshd[7609]: input_userauth_request: invalid user tg [preauth]
Sep 25 09:41:35 nativespace-cdp sshd[7609]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:41:35 nativespace-cdp sshd[7609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.103
Sep 25 09:41:37 nativespace-cdp sshd[7607]: Failed password for root from 138.68.148.139 port 38210 ssh2
Sep 25 09:41:37 nativespace-cdp sshd[7607]: Received disconnect from 138.68.148.139 port 38210:11: Bye Bye [preauth]
Sep 25 09:41:37 nativespace-cdp sshd[7607]: Disconnected from 138.68.148.139 port 38210 [preauth]
Sep 25 09:41:38 nativespace-cdp sshd[7609]: Failed password for invalid user tg from 171.244.37.103 port 47402 ssh2
Sep 25 09:41:38 nativespace-cdp sshd[7609]: Received disconnect from 171.244.37.103 port 47402:11: Bye Bye [preauth]
Sep 25 09:41:38 nativespace-cdp sshd[7609]: Disconnected from 171.244.37.103 port 47402 [preauth]
Sep 25 09:42:11 nativespace-cdp sshd[7806]: Invalid user main from 196.0.120.211 port 52418
Sep 25 09:42:11 nativespace-cdp sshd[7806]: input_userauth_request: invalid user main [preauth]
Sep 25 09:42:11 nativespace-cdp sshd[7806]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:42:11 nativespace-cdp sshd[7806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.0.120.211
Sep 25 09:42:13 nativespace-cdp sshd[7806]: Failed password for invalid user main from 196.0.120.211 port 52418 ssh2
Sep 25 09:42:13 nativespace-cdp sshd[7806]: Received disconnect from 196.0.120.211 port 52418:11: Bye Bye [preauth]
Sep 25 09:42:13 nativespace-cdp sshd[7806]: Disconnected from 196.0.120.211 port 52418 [preauth]
Sep 25 09:42:31 nativespace-cdp sshd[7869]: Invalid user test from 171.244.37.103 port 40112
Sep 25 09:42:31 nativespace-cdp sshd[7869]: input_userauth_request: invalid user test [preauth]
Sep 25 09:42:31 nativespace-cdp sshd[7869]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:42:31 nativespace-cdp sshd[7869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.103
Sep 25 09:42:32 nativespace-cdp sshd[7869]: Failed password for invalid user test from 171.244.37.103 port 40112 ssh2
Sep 25 09:42:33 nativespace-cdp sshd[7869]: Received disconnect from 171.244.37.103 port 40112:11: Bye Bye [preauth]
Sep 25 09:42:33 nativespace-cdp sshd[7869]: Disconnected from 171.244.37.103 port 40112 [preauth]
Sep 25 09:42:39 nativespace-cdp sshd[7758]: Connection closed by 101.36.127.102 port 34962 [preauth]
Sep 25 09:42:39 nativespace-cdp sshd[7913]: Invalid user user from 101.36.127.102 port 35000
Sep 25 09:42:39 nativespace-cdp sshd[7913]: input_userauth_request: invalid user user [preauth]
Sep 25 09:42:39 nativespace-cdp sshd[7913]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 09:42:39 nativespace-cdp sshd[7913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.127.102
Sep 25 09:42:42 nativespace-cdp sshd[7913]: Failed password for invalid user user from 101.36.127.102 port 35000 ssh2
Sep 25 09:42:42 nativespace-cdp sshd[7913]: Received disconnect from 101.36.127.102 port 35000:11: Bye Bye [preauth]
Sep 25 09:42:42 nativespace-cdp sshd[7913]: Disconnected from 101.36.127.102 port 35000 [preauth]
Sep 25 09:43:05 nativespace-cdp sshd[8022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.242.188.92  user=root
Sep 25 09:43:05 nativespace-cdp sshd[8022]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 09:43:07 nativespace-cdp sshd[8022]: Failed password for root from 47.242.188.92 port 58240 ssh2
Sep 25 09:43:10 nativespace-cdp sshd[8022]: Received disconnect from 47.242.188.92 port 58240:11: Bye Bye [preauth]
Sep 25 09:43:10 nativespace-cdp sshd[8022]: Disconnected from 47.242.188.92 port 58240 [preauth]
Sep 25 09:44:00 nativespace-cdp sshd[8309]: Connection closed by 47.242.188.92 port 54624 [preauth]
Sep 25 09:44:43 nativespace-cdp sshd[8436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.242.188.92  user=root
Sep 25 09:44:43 nativespace-cdp sshd[8436]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 09:44:45 nativespace-cdp sshd[8436]: Failed password for root from 47.242.188.92 port 51538 ssh2
Sep 25 09:46:36 nativespace-cdp sshd[9260]: Connection closed by 159.100.136.21 port 33668 [preauth]
Sep 25 09:51:36 nativespace-cdp sshd[10386]: Connection closed by 159.100.136.21 port 42588 [preauth]
Sep 25 09:56:33 nativespace-cdp sshd[11671]: Connection closed by 159.100.136.21 port 52276 [preauth]
Sep 25 10:01:33 nativespace-cdp sshd[13449]: Connection closed by 159.100.136.21 port 33220 [preauth]
Sep 25 10:06:33 nativespace-cdp sshd[14564]: Connection closed by 159.100.136.21 port 42662 [preauth]
Sep 25 10:11:33 nativespace-cdp sshd[15710]: Connection closed by 159.100.136.21 port 51964 [preauth]
Sep 25 10:16:35 nativespace-cdp sshd[17074]: Connection closed by 159.100.136.21 port 33178 [preauth]
Sep 25 10:21:34 nativespace-cdp sshd[18275]: Connection closed by 159.100.136.21 port 42320 [preauth]
Sep 25 10:26:34 nativespace-cdp sshd[19461]: Connection closed by 159.100.136.21 port 51742 [preauth]
Sep 25 10:31:33 nativespace-cdp sshd[21167]: Connection closed by 159.100.136.21 port 32852 [preauth]
Sep 25 10:36:34 nativespace-cdp sshd[22190]: Connection closed by 159.100.136.21 port 42458 [preauth]
Sep 25 10:41:33 nativespace-cdp sshd[23372]: Connection closed by 159.100.136.21 port 51830 [preauth]
Sep 25 10:46:36 nativespace-cdp sshd[24689]: Connection closed by 159.100.136.21 port 33290 [preauth]
Sep 25 10:51:33 nativespace-cdp sshd[26096]: Connection closed by 159.100.136.21 port 41716 [preauth]
Sep 25 10:56:33 nativespace-cdp sshd[27228]: Connection closed by 159.100.136.21 port 51650 [preauth]
Sep 25 11:01:34 nativespace-cdp sshd[28938]: Connection closed by 159.100.136.21 port 60492 [preauth]
Sep 25 11:06:33 nativespace-cdp sshd[30295]: Connection closed by 159.100.136.21 port 42022 [preauth]
Sep 25 11:11:33 nativespace-cdp sshd[31401]: Connection closed by 159.100.136.21 port 51062 [preauth]
Sep 25 11:16:33 nativespace-cdp sshd[531]: Connection closed by 159.100.136.21 port 60512 [preauth]
Sep 25 11:21:33 nativespace-cdp sshd[1683]: Connection closed by 159.100.136.21 port 41120 [preauth]
Sep 25 11:26:36 nativespace-cdp sshd[2686]: Connection closed by 159.100.136.21 port 50570 [preauth]
Sep 25 11:31:35 nativespace-cdp sshd[4206]: Connection closed by 159.100.136.21 port 59536 [preauth]
Sep 25 11:36:23 nativespace-cdp sshd[5208]: Accepted publickey for root from 66.155.22.27 port 60423 ssh2: RSA SHA256:jCkC22+bDfWRFTmBlp2VAL12/jnuJU5HG5BLin0B9OU
Sep 25 11:36:23 nativespace-cdp sshd[5208]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 25 11:36:33 nativespace-cdp sshd[5295]: Connection closed by 159.100.136.21 port 41080 [preauth]
Sep 25 11:36:58 nativespace-cdp sshd[5208]: pam_unix(sshd:session): session closed for user root
Sep 25 11:41:33 nativespace-cdp sshd[6660]: Connection closed by 159.100.136.21 port 50182 [preauth]
Sep 25 11:46:37 nativespace-cdp sshd[8186]: Connection closed by 159.100.136.21 port 59806 [preauth]
Sep 25 11:51:36 nativespace-cdp sshd[9326]: Connection closed by 159.100.136.21 port 41096 [preauth]
Sep 25 11:56:33 nativespace-cdp sshd[10668]: Connection closed by 159.100.136.21 port 50924 [preauth]
Sep 25 12:01:33 nativespace-cdp sshd[12253]: Connection closed by 159.100.136.21 port 59176 [preauth]
Sep 25 12:06:33 nativespace-cdp sshd[13612]: Connection closed by 159.100.136.21 port 39906 [preauth]
Sep 25 12:11:33 nativespace-cdp sshd[14908]: Connection closed by 159.100.136.21 port 48562 [preauth]
Sep 25 12:16:33 nativespace-cdp sshd[16937]: Connection closed by 159.100.136.21 port 57942 [preauth]
Sep 25 12:21:33 nativespace-cdp sshd[18438]: Connection closed by 159.100.136.21 port 38320 [preauth]
Sep 25 12:26:33 nativespace-cdp sshd[19673]: Connection closed by 159.100.136.21 port 47714 [preauth]
Sep 25 12:31:33 nativespace-cdp sshd[21122]: Connection closed by 159.100.136.21 port 55984 [preauth]
Sep 25 12:36:33 nativespace-cdp sshd[22302]: Connection closed by 159.100.136.21 port 37562 [preauth]
Sep 25 12:41:34 nativespace-cdp sshd[23431]: Connection closed by 159.100.136.21 port 47068 [preauth]
Sep 25 12:46:33 nativespace-cdp sshd[2014]: Connection closed by 159.100.136.21 port 57070 [preauth]
Sep 25 12:51:33 nativespace-cdp sshd[13088]: Connection closed by 159.100.136.21 port 38392 [preauth]
Sep 25 12:56:34 nativespace-cdp sshd[20679]: Connection closed by 159.100.136.21 port 47854 [preauth]
Sep 25 13:01:34 nativespace-cdp sshd[23634]: Connection closed by 159.100.136.21 port 56554 [preauth]
Sep 25 13:06:36 nativespace-cdp sshd[24887]: Connection closed by 159.100.136.21 port 36806 [preauth]
Sep 25 13:09:18 nativespace-cdp sshd[25413]: Bad protocol version identification 'GET / HTTP/1.1' from 13.58.97.162 port 35010
Sep 25 13:09:18 nativespace-cdp sshd[25414]: Bad protocol version identification '\026\003\001' from 13.58.97.162 port 35030
Sep 25 13:11:33 nativespace-cdp sshd[26281]: Connection closed by 159.100.136.21 port 45640 [preauth]
Sep 25 13:16:33 nativespace-cdp sshd[27629]: Connection closed by 159.100.136.21 port 54728 [preauth]
Sep 25 13:21:34 nativespace-cdp sshd[29057]: Connection closed by 159.100.136.21 port 35614 [preauth]
Sep 25 13:26:33 nativespace-cdp sshd[30146]: Connection closed by 159.100.136.21 port 44388 [preauth]
Sep 25 13:28:43 nativespace-cdp sshd[30577]: Invalid user bkp from 135.125.237.118 port 32934
Sep 25 13:28:43 nativespace-cdp sshd[30577]: input_userauth_request: invalid user bkp [preauth]
Sep 25 13:28:43 nativespace-cdp sshd[30577]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 13:28:43 nativespace-cdp sshd[30577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.237.118
Sep 25 13:28:45 nativespace-cdp sshd[30577]: Failed password for invalid user bkp from 135.125.237.118 port 32934 ssh2
Sep 25 13:28:45 nativespace-cdp sshd[30577]: Received disconnect from 135.125.237.118 port 32934:11: Bye Bye [preauth]
Sep 25 13:28:45 nativespace-cdp sshd[30577]: Disconnected from 135.125.237.118 port 32934 [preauth]
Sep 25 13:31:33 nativespace-cdp sshd[31577]: Connection closed by 159.100.136.21 port 53294 [preauth]
Sep 25 13:32:14 nativespace-cdp sshd[31695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.237.118  user=root
Sep 25 13:32:14 nativespace-cdp sshd[31695]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 13:32:16 nativespace-cdp sshd[31695]: Failed password for root from 135.125.237.118 port 45634 ssh2
Sep 25 13:32:16 nativespace-cdp sshd[31695]: Received disconnect from 135.125.237.118 port 45634:11: Bye Bye [preauth]
Sep 25 13:32:16 nativespace-cdp sshd[31695]: Disconnected from 135.125.237.118 port 45634 [preauth]
Sep 25 13:32:57 nativespace-cdp sshd[31814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.237.118  user=root
Sep 25 13:32:57 nativespace-cdp sshd[31814]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 13:33:00 nativespace-cdp sshd[31814]: Failed password for root from 135.125.237.118 port 39346 ssh2
Sep 25 13:33:00 nativespace-cdp sshd[31814]: Received disconnect from 135.125.237.118 port 39346:11: Bye Bye [preauth]
Sep 25 13:33:00 nativespace-cdp sshd[31814]: Disconnected from 135.125.237.118 port 39346 [preauth]
Sep 25 13:36:33 nativespace-cdp sshd[32666]: Connection closed by 159.100.136.21 port 34506 [preauth]
Sep 25 13:41:33 nativespace-cdp sshd[1553]: Connection closed by 159.100.136.21 port 43704 [preauth]
Sep 25 13:46:33 nativespace-cdp sshd[3040]: Connection closed by 159.100.136.21 port 53640 [preauth]
Sep 25 13:51:33 nativespace-cdp sshd[4241]: Connection closed by 159.100.136.21 port 34684 [preauth]
Sep 25 13:56:33 nativespace-cdp sshd[5302]: Connection closed by 159.100.136.21 port 44170 [preauth]
Sep 25 14:01:33 nativespace-cdp sshd[6924]: Connection closed by 159.100.136.21 port 53550 [preauth]
Sep 25 14:06:33 nativespace-cdp sshd[8216]: Connection closed by 159.100.136.21 port 34478 [preauth]
Sep 25 14:11:34 nativespace-cdp sshd[9418]: Connection closed by 159.100.136.21 port 43904 [preauth]
Sep 25 14:16:33 nativespace-cdp sshd[10861]: Connection closed by 159.100.136.21 port 53946 [preauth]
Sep 25 14:21:35 nativespace-cdp sshd[12100]: Connection closed by 159.100.136.21 port 34860 [preauth]
Sep 25 14:26:34 nativespace-cdp sshd[13234]: Connection closed by 159.100.136.21 port 44894 [preauth]
Sep 25 14:31:36 nativespace-cdp sshd[14859]: Connection closed by 159.100.136.21 port 54616 [preauth]
Sep 25 14:36:33 nativespace-cdp sshd[15949]: Connection closed by 159.100.136.21 port 36104 [preauth]
Sep 25 14:41:33 nativespace-cdp sshd[17098]: Connection closed by 159.100.136.21 port 45186 [preauth]
Sep 25 14:46:33 nativespace-cdp sshd[18413]: Connection closed by 159.100.136.21 port 55054 [preauth]
Sep 25 14:51:35 nativespace-cdp sshd[19669]: Connection closed by 159.100.136.21 port 35988 [preauth]
Sep 25 14:56:34 nativespace-cdp sshd[20719]: Connection closed by 159.100.136.21 port 45768 [preauth]
Sep 25 14:58:23 nativespace-cdp sshd[21057]: Invalid user ana from 103.236.192.222 port 44276
Sep 25 14:58:23 nativespace-cdp sshd[21057]: input_userauth_request: invalid user ana [preauth]
Sep 25 14:58:23 nativespace-cdp sshd[21057]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 14:58:23 nativespace-cdp sshd[21057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.236.192.222
Sep 25 14:58:25 nativespace-cdp sshd[21057]: Failed password for invalid user ana from 103.236.192.222 port 44276 ssh2
Sep 25 14:58:30 nativespace-cdp sshd[21057]: Received disconnect from 103.236.192.222 port 44276:11: Bye Bye [preauth]
Sep 25 14:58:30 nativespace-cdp sshd[21057]: Disconnected from 103.236.192.222 port 44276 [preauth]
Sep 25 15:01:36 nativespace-cdp sshd[22303]: Connection closed by 159.100.136.21 port 54902 [preauth]
Sep 25 15:03:28 nativespace-cdp sshd[22735]: Invalid user iptv from 103.236.192.222 port 60348
Sep 25 15:03:28 nativespace-cdp sshd[22735]: input_userauth_request: invalid user iptv [preauth]
Sep 25 15:03:28 nativespace-cdp sshd[22735]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 15:03:28 nativespace-cdp sshd[22735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.236.192.222
Sep 25 15:03:30 nativespace-cdp sshd[22735]: Failed password for invalid user iptv from 103.236.192.222 port 60348 ssh2
Sep 25 15:03:50 nativespace-cdp sshd[22735]: Received disconnect from 103.236.192.222 port 60348:11: Bye Bye [preauth]
Sep 25 15:03:50 nativespace-cdp sshd[22735]: Disconnected from 103.236.192.222 port 60348 [preauth]
Sep 25 15:04:17 nativespace-cdp sshd[23032]: Invalid user sysadmin from 103.236.192.222 port 57744
Sep 25 15:04:17 nativespace-cdp sshd[23032]: input_userauth_request: invalid user sysadmin [preauth]
Sep 25 15:04:17 nativespace-cdp sshd[23032]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 15:04:17 nativespace-cdp sshd[23032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.236.192.222
Sep 25 15:04:19 nativespace-cdp sshd[23032]: Failed password for invalid user sysadmin from 103.236.192.222 port 57744 ssh2
Sep 25 15:04:19 nativespace-cdp sshd[23032]: Received disconnect from 103.236.192.222 port 57744:11: Bye Bye [preauth]
Sep 25 15:04:19 nativespace-cdp sshd[23032]: Disconnected from 103.236.192.222 port 57744 [preauth]
Sep 25 15:06:33 nativespace-cdp sshd[23732]: Connection closed by 159.100.136.21 port 36414 [preauth]
Sep 25 15:11:33 nativespace-cdp sshd[24852]: Connection closed by 159.100.136.21 port 46054 [preauth]
Sep 25 15:16:36 nativespace-cdp sshd[26237]: Connection closed by 159.100.136.21 port 55688 [preauth]
Sep 25 15:21:33 nativespace-cdp sshd[27283]: Connection closed by 159.100.136.21 port 36714 [preauth]
Sep 25 15:26:34 nativespace-cdp sshd[28415]: Connection closed by 159.100.136.21 port 45684 [preauth]
Sep 25 15:31:36 nativespace-cdp sshd[29880]: Connection closed by 159.100.136.21 port 55330 [preauth]
Sep 25 15:33:25 nativespace-cdp sudo[5469]: pam_unix(sudo:session): session closed for user root
Sep 25 15:33:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 15:33:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:33:30 nativespace-cdp sudo[30388]: pam_unix(sudo:session): session closed for user root
Sep 25 15:33:30 nativespace-cdp sudo[1681236]: pam_unix(sudo:session): session closed for user root
Sep 25 15:33:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 25 15:33:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:33:33 nativespace-cdp sudo[30395]: pam_unix(sudo:session): session closed for user root
Sep 25 15:33:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hhdugcor user-2=lbhyisi user-3=magichat user-4=martsblo user-5=dickemery123 user-6=ptkxhsbt user-7=wilsonsw user-8=megacards user-9=musorguk user-10=lakesan1 user-11=brmrjxl user-12=strathar user-13=atestord user-14=sarafoundation user-15=agproduc user-16=still user-17=stephani user-18=leereyn1 user-19=jarvisin user-20=spectrum user-21=theblack user-22=hodgesonweb user-23=ulsukarm user-24=foundation user-25=markward user-26=booff user-27=vantagep user-28=connect9 user-29=athenare user-30=lbscrmod user-31=maflemin user-32=innovat1 user-33=askhform user-34=stuartge user-35=nativene user-36=skyfirec user-37=alexadmin user-38=bedfords user-39=newstoda user-40=belle user-41=ggaaorgu user-42=bemadonn user-43=nstriton user-44=brighto1 user-45=vivienn1 user-46=firstre2 user-47=oneoarco user-48=battlere
Sep 25 15:33:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=accooper user-50=ianrayne user-51=connectedshoppin user-52=thqkgnbz user-53=milloyco user-54=gilpin user-55=elecleis user-56=hubmaster user-57=fetch user-58=carsinyo user-59=clarkass user-60=firstrel user-61=costestimatorco user-62=firstred user-63=highlegh user-64=southlon user-65=ultbcrra user-66=jonhartl user-67=seftvta user-68=firstres user-69=coursemc user-70=opaiscyx user-71=hirefootballgame user-72=eugincou user-73=courseme user-74=cathski user-75=cambria1 user-76=ninejimm user-77=reliable user-78=cwsocial user-79=paulmca1 user-80=howardon user-81=pugwash user-82=isleofwi user-83=smrszyqg user-84=nomistakes user-85=hidden user-86=barbersh user-87=tigerlet user-88=nscdp user-89=foods user-90=leftie user-91=fortunaz user-92=health2045 user-93=lkpier user-94=steakbridieme user-95=firstre5 user-96=donnychicago user-97=ctedorgu user-98=philmcph user-99=beauty user-100=darkstar user-101=eatspam
Sep 25 15:33:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=fawcettd user-104=burydropin user-105=nsceres user-106=bwppodcast user-107=zebrapho user-108=steve user-109=sibtoncc user-110=asandcoc user-111=dancinggardener user-112=stagingerris user-113=ladburyp user-114=kategilpin user-115=design user-116=tstardom user-117=oubpgvbx user-118=what user-119=havantho user-120=sketchy user-121=cath user-122=nvihkvu user-123=bakery user-124=crrtipdl user-125=sosevalu user-126=nove user-127=boldover user-128=hodgsonmail user-129=outdoorc user-130=ranxterc user-131=branko user-132=romaldki user-133=lucy user-134=attlebor user-135=onlycont user-136=chrisdal user-137=mcdermos user-138=david user-139=careers user-140=nbhavers user-141=tomandle user-142=jennimil feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 25 15:33:34 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 25 15:33:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:33:34 nativespace-cdp sudo[30403]: pam_unix(sudo:session): session closed for user root
Sep 25 15:33:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 25 15:33:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:33:35 nativespace-cdp sudo[30410]: pam_unix(sudo:session): session closed for user root
Sep 25 15:33:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 25 15:33:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:33:36 nativespace-cdp sudo[30415]: pam_unix(sudo:session): session closed for user root
Sep 25 15:34:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 25 15:34:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 25 15:34:11 nativespace-cdp sudo[30835]: pam_unix(sudo:session): session closed for user onlycont
Sep 25 15:34:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 25 15:34:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:34:13 nativespace-cdp sudo[30845]: pam_unix(sudo:session): session closed for user root
Sep 25 15:34:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 25 15:34:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:34:19 nativespace-cdp sudo[30855]: pam_unix(sudo:session): session closed for user root
Sep 25 15:34:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 25 15:34:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:34:41 nativespace-cdp sudo[30874]: pam_unix(sudo:session): session closed for user root
Sep 25 15:34:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 25 15:34:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:34:41 nativespace-cdp sudo[30986]: pam_unix(sudo:session): session closed for user root
Sep 25 15:35:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lbhyisi WpToolkitNotification send_admin_suspicious_instance_notification 'suspicious_instance_text=The following WordPress installations are quarantined:<br/>' 'suspicious_instance_details_info=Website "ApexRed IR" (https://apexred.com/wp): Unable to finish running an operation on this site in 60 seconds. Operation was canceled. This is most likely caused by a server load spike, uncommon directives in wp-config.php, or a malware infection. Try running the operation again later. If this problem persists, make sure there are no customizations in wp-config.php that could slow down parsing this file, and consider checking the website for viruses and malware.' --output=json
Sep 25 15:35:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:35:49 nativespace-cdp sudo[31475]: pam_unix(sudo:session): session closed for user root
Sep 25 15:35:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 25 15:35:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:35:54 nativespace-cdp sudo[31505]: pam_unix(sudo:session): session closed for user root
Sep 25 15:35:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 25 15:35:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:36:00 nativespace-cdp sudo[31524]: pam_unix(sudo:session): session closed for user root
Sep 25 15:36:35 nativespace-cdp sshd[31723]: Connection closed by 159.100.136.21 port 35904 [preauth]
Sep 25 15:37:48 nativespace-cdp crond[31827]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 25 15:37:48 nativespace-cdp crond[31826]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 25 15:39:05 nativespace-cdp crond[31973]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 25 15:39:05 nativespace-cdp crond[31974]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 25 15:39:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lbhyisi WpToolkitNotification send_admin_suspicious_instance_notification 'suspicious_instance_text=The following WordPress installations are quarantined:<br/>' 'suspicious_instance_details_info=Website "ONE | OAR" (https://oneoar.co.uk): Unable to finish running an operation on this site in 60 seconds. Operation was canceled. This is most likely caused by a server load spike, uncommon directives in wp-config.php, or a malware infection. Try running the operation again later. If this problem persists, make sure there are no customizations in wp-config.php that could slow down parsing this file, and consider checking the website for viruses and malware.' --output=json
Sep 25 15:39:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:41:16 nativespace-cdp sudo[31991]: pam_unix(sudo:session): session closed for user root
Sep 25 15:41:37 nativespace-cdp sshd[32694]: Connection closed by 159.100.136.21 port 45288 [preauth]
Sep 25 15:42:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 25 15:42:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:42:22 nativespace-cdp sudo[528]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:42:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 25 15:42:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:42:24 nativespace-cdp sudo[549]: pam_unix(sudo:session): session closed for user root
Sep 25 15:42:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 25 15:42:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:42:25 nativespace-cdp sudo[618]: pam_unix(sudo:session): session closed for user root
Sep 25 15:42:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 25 15:42:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:42:29 nativespace-cdp sudo[651]: pam_unix(sudo:session): session closed for user root
Sep 25 15:42:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 25 15:42:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:42:29 nativespace-cdp sudo[680]: pam_unix(sudo:session): session closed for user root
Sep 25 15:43:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 25 15:43:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:43:05 nativespace-cdp sudo[935]: pam_unix(sudo:session): session closed for user root
Sep 25 15:43:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 25 15:43:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:43:11 nativespace-cdp sudo[949]: pam_unix(sudo:session): session closed for user root
Sep 25 15:43:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 25 15:43:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:43:11 nativespace-cdp sudo[984]: pam_unix(sudo:session): session closed for user root
Sep 25 15:43:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 25 15:43:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:43:13 nativespace-cdp sudo[991]: pam_unix(sudo:session): session closed for user root
Sep 25 15:43:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 25 15:43:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:43:30 nativespace-cdp sudo[1182]: pam_unix(sudo:session): session closed for user root
Sep 25 15:43:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 25 15:43:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:43:34 nativespace-cdp sudo[1260]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:43:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 25 15:43:34 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 25 15:43:34 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 25 15:43:34 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:43:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:43:35 nativespace-cdp sudo[1269]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:43:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 25 15:43:35 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 25 15:43:35 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 25 15:43:35 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:43:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:43:57 nativespace-cdp sudo[1278]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:44:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 25 15:44:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:44:17 nativespace-cdp sudo[1572]: pam_unix(sudo:session): session closed for user root
Sep 25 15:44:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 25 15:44:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:44:18 nativespace-cdp sudo[1593]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 25 15:45:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 15:45:02 nativespace-cdp sudo[2231]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 15:45:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 25 15:45:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:03 nativespace-cdp sudo[2253]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 25 15:45:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:04 nativespace-cdp sudo[2258]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 25 15:45:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:04 nativespace-cdp sudo[2265]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 25 15:45:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:07 nativespace-cdp sudo[2391]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 25 15:45:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:07 nativespace-cdp sudo[2397]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 25 15:45:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:20 nativespace-cdp sudo[2509]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 25 15:45:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 15:45:24 nativespace-cdp sudo[2580]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 15:45:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 25 15:45:24 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 25 15:45:24 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 25 15:45:24 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:45:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 15:45:24 nativespace-cdp sudo[2596]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 15:45:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 25 15:45:24 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 25 15:45:24 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 25 15:45:24 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:45:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 15:45:37 nativespace-cdp sudo[2603]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 15:45:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 25 15:45:37 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 25 15:45:37 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 25 15:45:37 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:45:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 15:45:37 nativespace-cdp sudo[2710]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 25 15:45:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 15:45:44 nativespace-cdp sudo[2854]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:45:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 15:45:44 nativespace-cdp sudo[2861]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:45:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 15:45:44 nativespace-cdp sudo[2869]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 25 15:45:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:45:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 15:45:44 nativespace-cdp sudo[2878]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 15:45:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 25 15:45:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:47 nativespace-cdp sudo[2937]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 25 15:45:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:47 nativespace-cdp sudo[2943]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 25 15:45:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:48 nativespace-cdp sudo[2957]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 25 15:45:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:48 nativespace-cdp sudo[2962]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 25 15:45:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 25 15:45:49 nativespace-cdp sudo[2974]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 25 15:45:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 25 15:45:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:50 nativespace-cdp sudo[2980]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 25 15:45:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:50 nativespace-cdp sudo[2986]: pam_unix(sudo:session): session closed for user root
Sep 25 15:45:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 25 15:45:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:45:50 nativespace-cdp sudo[2990]: pam_unix(sudo:session): session closed for user root
Sep 25 15:46:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 25 15:46:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:46:01 nativespace-cdp sudo[3088]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:46:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 25 15:46:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:46:01 nativespace-cdp sudo[3095]: pam_unix(sudo:session): session closed for user root
Sep 25 15:46:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 25 15:46:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:46:02 nativespace-cdp sudo[3112]: pam_unix(sudo:session): session closed for user root
Sep 25 15:46:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 25 15:46:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:46:03 nativespace-cdp sudo[3150]: pam_unix(sudo:session): session closed for user root
Sep 25 15:46:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 25 15:46:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:46:12 nativespace-cdp sudo[3222]: pam_unix(sudo:session): session closed for user root
Sep 25 15:46:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 25 15:46:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:46:15 nativespace-cdp sudo[3285]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:46:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 25 15:46:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 25 15:46:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 25 15:46:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:46:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:46:15 nativespace-cdp sudo[3291]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:46:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 25 15:46:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 25 15:46:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 25 15:46:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:46:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:46:28 nativespace-cdp sudo[3299]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:46:33 nativespace-cdp sshd[3556]: Connection closed by 159.100.136.21 port 55022 [preauth]
Sep 25 15:46:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 25 15:46:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:46:35 nativespace-cdp sudo[3590]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:46:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 25 15:46:35 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 25 15:46:35 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 25 15:46:35 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:46:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:46:35 nativespace-cdp sudo[3596]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:46:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 25 15:46:35 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 25 15:46:35 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 25 15:46:35 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 25 15:46:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 15:46:35 nativespace-cdp sudo[3603]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 15:46:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 25 15:46:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:46:38 nativespace-cdp sudo[3690]: pam_unix(sudo:session): session closed for user root
Sep 25 15:46:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 25 15:46:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:46:38 nativespace-cdp sudo[3696]: pam_unix(sudo:session): session closed for user root
Sep 25 15:47:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 25 15:47:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 25 15:47:25 nativespace-cdp sudo[3929]: pam_unix(sudo:session): session closed for user fortunaz
Sep 25 15:47:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 25 15:47:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:47:26 nativespace-cdp sudo[3935]: pam_unix(sudo:session): session closed for user root
Sep 25 15:47:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 25 15:47:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:47:26 nativespace-cdp sudo[3940]: pam_unix(sudo:session): session closed for user root
Sep 25 15:47:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 25 15:47:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:47:26 nativespace-cdp sudo[3945]: pam_unix(sudo:session): session closed for user root
Sep 25 15:47:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 25 15:47:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:47:29 nativespace-cdp sudo[3986]: pam_unix(sudo:session): session closed for user root
Sep 25 15:47:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 25 15:47:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:47:29 nativespace-cdp sudo[3993]: pam_unix(sudo:session): session closed for user root
Sep 25 15:47:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 25 15:47:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:47:38 nativespace-cdp sudo[4086]: pam_unix(sudo:session): session closed for user root
Sep 25 15:47:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lbhyisi WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "Responsive Blocks - WordPress Gutenberg Blocks" on Limekilns Heritage Trust (https://limekilnspier.org.uk). Installed version: 1.8.1. Available version: 1.9.1.<br/><br/>2. Plugin "Yoast SEO" on Limekilns Heritage Trust (https://limekilnspier.org.uk). Installed version: 22.0. Available version: 23.5.<br/><br/>3. Plugin "UpdraftPlus - Backup/Restore" on Pinstripe Inventories (https://pinstripe.services). Installed version: 1.24.1. Available version: 1.24.5.<br/><br/>4. Plugin "Yoast SEO" on Pinstripe Inventories (https://pinstripe.services). Installed version: 21.6. Available version: 23.5.<br/><br/>' installed_updates_text=
Sep 25 15:47:49 nativespace-cdp sudo: wp-toolkit : (command continued) installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "ApexRed IR" (https://apexred.com/wp): Failed to reset cache for the instance #1: Unable to finish running an operation on this site in 60 seconds. Operation was canceled. This is most likely caused by a server load spike, uncommon directives in wp-config.php, or a malware infection. Try running the operation again later. If this problem persists, make sure there are no customizations in wp-config.php that could slow down parsing this file, and consider checking the website for viruses and malware.<br/><br/>2. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core
Sep 25 15:47:49 nativespace-cdp sudo: wp-toolkit : (command continued) download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 25 15:47:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:47:49 nativespace-cdp sudo[4297]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 25 15:48:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:10 nativespace-cdp sudo[4515]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4533]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4536]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4539]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4542]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4545]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4548]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4552]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4555]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4558]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4561]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4564]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:11 nativespace-cdp sudo[4567]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4570]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4573]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4577]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4580]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4583]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4586]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4589]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4594]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4597]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4600]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4603]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4606]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4609]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4612]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4615]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4618]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4621]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4624]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4627]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4630]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4633]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4637]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4640]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4643]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4646]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4649]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4652]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:12 nativespace-cdp sudo[4655]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4658]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4661]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4664]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4667]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4670]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4674]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4677]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4680]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4683]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4686]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4689]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4692]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4695]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4698]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4701]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4704]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4707]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4710]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4713]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4716]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4719]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4722]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4725]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4729]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4732]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4736]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4739]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4742]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4745]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:13 nativespace-cdp sudo[4748]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4751]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4754]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4757]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4760]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4763]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4766]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4769]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4772]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4775]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4778]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4781]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4784]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4787]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4790]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4793]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4797]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4800]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4803]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4806]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4809]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4812]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4816]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4819]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4822]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4825]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:14 nativespace-cdp sudo[4828]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4831]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4834]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4837]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4840]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4843]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4846]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4849]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4852]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4855]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4858]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4861]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4864]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4867]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4870]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4873]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4876]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4879]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4882]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4885]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4888]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4891]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4894]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4897]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4901]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4904]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4907]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4910]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4913]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4916]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 25 15:48:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:15 nativespace-cdp sudo[4919]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4922]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4925]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4928]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4931]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4934]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4938]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4941]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4944]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4947]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4950]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4953]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4956]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4959]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4962]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4965]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4968]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4971]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4974]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4977]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4981]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4984]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4987]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4990]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4993]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[4997]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[5000]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[5003]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[5006]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[5009]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:16 nativespace-cdp sudo[5012]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5015]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5018]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5021]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5024]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5027]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5030]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5033]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5036]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5041]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5045]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5050]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5053]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5056]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5059]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5062]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5065]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5068]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5071]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5074]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5077]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5080]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5083]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5086]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5089]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5092]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5096]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5101]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5104]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5107]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5110]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:17 nativespace-cdp sudo[5123]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5126]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5129]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5132]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5135]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5138]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5141]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5144]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5149]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5152]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5155]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5158]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5161]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5164]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5167]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5170]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5173]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5176]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5179]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5182]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5185]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5188]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5191]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5204]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5207]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5210]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5213]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5216]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5220]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5223]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5226]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5229]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5232]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 25 15:48:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:18 nativespace-cdp sudo[5235]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 25 15:48:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:19 nativespace-cdp sudo[5238]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 25 15:48:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:19 nativespace-cdp sudo[5241]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 25 15:48:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:19 nativespace-cdp sudo[5244]: pam_unix(sudo:session): session closed for user root
Sep 25 15:48:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 25 15:48:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 15:48:19 nativespace-cdp sudo[5247]: pam_unix(sudo:session): session closed for user root
Sep 25 15:51:36 nativespace-cdp sshd[6893]: Connection closed by 159.100.136.21 port 35528 [preauth]
Sep 25 15:56:36 nativespace-cdp sshd[9705]: Connection closed by 159.100.136.21 port 45178 [preauth]
Sep 25 16:01:33 nativespace-cdp sshd[21998]: Connection closed by 159.100.136.21 port 54398 [preauth]
Sep 25 16:06:34 nativespace-cdp sshd[911]: Connection closed by 159.100.136.21 port 35536 [preauth]
Sep 25 16:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 25 16:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:09:58 nativespace-cdp sudo[6016]: pam_unix(sudo:session): session closed for user root
Sep 25 16:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 25 16:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:09:58 nativespace-cdp sudo[6023]: pam_unix(sudo:session): session closed for user root
Sep 25 16:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 25 16:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:00 nativespace-cdp sudo[6026]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 25 16:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:00 nativespace-cdp sudo[6066]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 25 16:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:06 nativespace-cdp sudo[6070]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 25 16:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:06 nativespace-cdp sudo[6301]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 25 16:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:06 nativespace-cdp sudo[6306]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 25 16:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:06 nativespace-cdp sudo[6310]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 25 16:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:06 nativespace-cdp sudo[6313]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 16:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:06 nativespace-cdp sudo[6317]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 25 16:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:06 nativespace-cdp sudo[6323]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 16:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:17 nativespace-cdp sudo[6542]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 25 16:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:17 nativespace-cdp sudo[6555]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=magichat user-2=hhdugcor user-3=lbhyisi user-4=dickemery123 user-5=ptkxhsbt user-6=martsblo user-7=megacards user-8=musorguk user-9=wilsonsw user-10=strathar user-11=atestord user-12=sarafoundation user-13=brmrjxl user-14=lakesan1 user-15=stephani user-16=leereyn1 user-17=agproduc user-18=still user-19=spectrum user-20=hodgesonweb user-21=theblack user-22=jarvisin user-23=ulsukarm user-24=vantagep user-25=athenare user-26=connect9 user-27=lbscrmod user-28=maflemin user-29=markward user-30=foundation user-31=booff user-32=nativene user-33=innovat1 user-34=askhform user-35=stuartge user-36=alexadmin user-37=skyfirec user-38=newstoda user-39=belle user-40=ggaaorgu user-41=bemadonn user-42=bedfords user-43=vivienn1 user-44=firstre2 user-45=oneoarco user-46=battlere user-47=nstriton user-48=brighto1
Sep 25 16:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=connectedshoppin user-50=thqkgnbz user-51=accooper user-52=ianrayne user-53=hubmaster user-54=fetch user-55=carsinyo user-56=milloyco user-57=gilpin user-58=elecleis user-59=firstred user-60=highlegh user-61=southlon user-62=clarkass user-63=firstrel user-64=costestimatorco user-65=coursemc user-66=opaiscyx user-67=ultbcrra user-68=jonhartl user-69=seftvta user-70=firstres user-71=eugincou user-72=courseme user-73=hirefootballgame user-74=cwsocial user-75=howardon user-76=paulmca1 user-77=pugwash user-78=cambria1 user-79=cathski user-80=reliable user-81=ninejimm user-82=nomistakes user-83=hidden user-84=tigerlet user-85=barbersh user-86=isleofwi user-87=smrszyqg user-88=lkpier user-89=donnychicago user-90=steakbridieme user-91=firstre5 user-92=ctedorgu user-93=philmcph user-94=nscdp user-95=leftie user-96=foods user-97=fortunaz user-98=health2045 user-99=dhyana user-100=beauty user-101=darkstar
Sep 25 16:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eatspam user-103=nsceres user-104=fawcettd user-105=burydropin user-106=steve user-107=bwppodcast user-108=zebrapho user-109=asandcoc user-110=sibtoncc user-111=design user-112=dancinggardener user-113=stagingerris user-114=ladburyp user-115=kategilpin user-116=havantho user-117=sketchy user-118=cath user-119=nvihkvu user-120=oubpgvbx user-121=tstardom user-122=what user-123=bakery user-124=crrtipdl user-125=sosevalu user-126=boldover user-127=nove user-128=romaldki user-129=hodgsonmail user-130=ranxterc user-131=outdoorc user-132=branko user-133=onlycont user-134=lucy user-135=attlebor user-136=david user-137=careers user-138=nbhavers user-139=chrisdal user-140=mcdermos user-141=jennimil user-142=tomandle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 25 16:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 25 16:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:18 nativespace-cdp sudo[6562]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 25 16:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:21 nativespace-cdp sudo[6625]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 25 16:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 25 16:10:21 nativespace-cdp sudo[6648]: pam_unix(sudo:session): session closed for user onlycont
Sep 25 16:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 25 16:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:22 nativespace-cdp sudo[6674]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 25 16:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 16:10:22 nativespace-cdp sudo[6693]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 16:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 25 16:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:27 nativespace-cdp sudo[6779]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 25 16:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 25 16:10:27 nativespace-cdp sudo[6797]: pam_unix(sudo:session): session closed for user lkpier
Sep 25 16:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 25 16:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:29 nativespace-cdp sudo[6827]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 25 16:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 25 16:10:29 nativespace-cdp sudo[6846]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 25 16:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 25 16:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 25 16:10:29 nativespace-cdp sudo[6864]: pam_unix(sudo:session): session closed for user oneoarco
Sep 25 16:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 25 16:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:30 nativespace-cdp sudo[6884]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 25 16:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 25 16:10:30 nativespace-cdp sudo[6900]: pam_unix(sudo:session): session closed for user fortunaz
Sep 25 16:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 25 16:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:30 nativespace-cdp sudo[6915]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 16:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:30 nativespace-cdp sudo[6920]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 25 16:10:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:49 nativespace-cdp sudo[8187]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 25 16:10:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:49 nativespace-cdp sudo[8194]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 16:10:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:55 nativespace-cdp sudo[8349]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DndtWx851FF4m6fY.~
Sep 25 16:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:56 nativespace-cdp sudo[8354]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DndtWx851FF4m6fY.~'
Sep 25 16:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:56 nativespace-cdp sudo[8358]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DndtWx851FF4m6fY.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 16:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:56 nativespace-cdp sudo[8363]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 25 16:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:56 nativespace-cdp sudo[8366]: pam_unix(sudo:session): session closed for user root
Sep 25 16:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 25 16:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:10:57 nativespace-cdp sudo[8373]: pam_unix(sudo:session): session closed for user root
Sep 25 16:11:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 25 16:11:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 16:11:33 nativespace-cdp sshd[9285]: Connection closed by 159.100.136.21 port 45192 [preauth]
Sep 25 16:11:33 nativespace-cdp sudo[9276]: pam_unix(sudo:session): session closed for user root
Sep 25 16:16:36 nativespace-cdp sshd[12181]: Connection closed by 159.100.136.21 port 54462 [preauth]
Sep 25 16:21:36 nativespace-cdp sshd[13597]: Connection closed by 159.100.136.21 port 35404 [preauth]
Sep 25 16:26:33 nativespace-cdp sshd[14761]: Connection closed by 159.100.136.21 port 44986 [preauth]
Sep 25 16:31:33 nativespace-cdp sshd[16434]: Connection closed by 159.100.136.21 port 54148 [preauth]
Sep 25 16:36:33 nativespace-cdp sshd[17585]: Connection closed by 159.100.136.21 port 35768 [preauth]
Sep 25 16:41:33 nativespace-cdp sshd[18928]: Connection closed by 159.100.136.21 port 45208 [preauth]
Sep 25 16:45:50 nativespace-cdp sshd[20143]: Bad protocol version identification '\003' from 91.238.181.34 port 65309
Sep 25 16:46:33 nativespace-cdp sshd[20288]: Connection closed by 159.100.136.21 port 54428 [preauth]
Sep 25 16:51:33 nativespace-cdp sshd[21556]: Connection closed by 159.100.136.21 port 35258 [preauth]
Sep 25 16:55:16 nativespace-cdp sshd[22533]: Invalid user test from 45.117.32.230 port 33960
Sep 25 16:55:16 nativespace-cdp sshd[22533]: input_userauth_request: invalid user test [preauth]
Sep 25 16:55:17 nativespace-cdp sshd[22533]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 16:55:17 nativespace-cdp sshd[22533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.117.32.230
Sep 25 16:55:18 nativespace-cdp sshd[22533]: Failed password for invalid user test from 45.117.32.230 port 33960 ssh2
Sep 25 16:55:18 nativespace-cdp sshd[22533]: Received disconnect from 45.117.32.230 port 33960:11: Bye Bye [preauth]
Sep 25 16:55:18 nativespace-cdp sshd[22533]: Disconnected from 45.117.32.230 port 33960 [preauth]
Sep 25 16:56:32 nativespace-cdp sshd[22825]: Invalid user sopuser from 185.47.172.95 port 1732
Sep 25 16:56:32 nativespace-cdp sshd[22825]: input_userauth_request: invalid user sopuser [preauth]
Sep 25 16:56:32 nativespace-cdp sshd[22825]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 16:56:32 nativespace-cdp sshd[22825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.47.172.95
Sep 25 16:56:33 nativespace-cdp sshd[22831]: Connection closed by 159.100.136.21 port 45180 [preauth]
Sep 25 16:56:34 nativespace-cdp sshd[22825]: Failed password for invalid user sopuser from 185.47.172.95 port 1732 ssh2
Sep 25 16:56:34 nativespace-cdp sshd[22825]: Received disconnect from 185.47.172.95 port 1732:11: Bye Bye [preauth]
Sep 25 16:56:34 nativespace-cdp sshd[22825]: Disconnected from 185.47.172.95 port 1732 [preauth]
Sep 25 16:57:33 nativespace-cdp sshd[23204]: Invalid user ubuntu from 51.79.135.112 port 60898
Sep 25 16:57:33 nativespace-cdp sshd[23204]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 16:57:33 nativespace-cdp sshd[23204]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 16:57:33 nativespace-cdp sshd[23204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.135.112
Sep 25 16:57:36 nativespace-cdp sshd[23204]: Failed password for invalid user ubuntu from 51.79.135.112 port 60898 ssh2
Sep 25 16:57:36 nativespace-cdp sshd[23204]: Received disconnect from 51.79.135.112 port 60898:11: Bye Bye [preauth]
Sep 25 16:57:36 nativespace-cdp sshd[23204]: Disconnected from 51.79.135.112 port 60898 [preauth]
Sep 25 16:57:47 nativespace-cdp sshd[23246]: Invalid user test from 197.157.17.151 port 36092
Sep 25 16:57:47 nativespace-cdp sshd[23246]: input_userauth_request: invalid user test [preauth]
Sep 25 16:57:47 nativespace-cdp sshd[23246]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 16:57:47 nativespace-cdp sshd[23246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.157.17.151
Sep 25 16:57:49 nativespace-cdp sshd[23246]: Failed password for invalid user test from 197.157.17.151 port 36092 ssh2
Sep 25 16:57:49 nativespace-cdp sshd[23246]: Received disconnect from 197.157.17.151 port 36092:11: Bye Bye [preauth]
Sep 25 16:57:49 nativespace-cdp sshd[23246]: Disconnected from 197.157.17.151 port 36092 [preauth]
Sep 25 16:59:04 nativespace-cdp sshd[23667]: Invalid user user from 175.207.13.86 port 41810
Sep 25 16:59:04 nativespace-cdp sshd[23667]: input_userauth_request: invalid user user [preauth]
Sep 25 16:59:04 nativespace-cdp sshd[23667]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 16:59:04 nativespace-cdp sshd[23667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.207.13.86
Sep 25 16:59:06 nativespace-cdp sshd[23667]: Failed password for invalid user user from 175.207.13.86 port 41810 ssh2
Sep 25 16:59:06 nativespace-cdp sshd[23667]: Received disconnect from 175.207.13.86 port 41810:11: Bye Bye [preauth]
Sep 25 16:59:06 nativespace-cdp sshd[23667]: Disconnected from 175.207.13.86 port 41810 [preauth]
Sep 25 16:59:31 nativespace-cdp sshd[23932]: Invalid user test from 45.117.32.230 port 47900
Sep 25 16:59:31 nativespace-cdp sshd[23932]: input_userauth_request: invalid user test [preauth]
Sep 25 16:59:31 nativespace-cdp sshd[23932]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 16:59:31 nativespace-cdp sshd[23932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.117.32.230
Sep 25 16:59:33 nativespace-cdp sshd[23932]: Failed password for invalid user test from 45.117.32.230 port 47900 ssh2
Sep 25 16:59:57 nativespace-cdp sshd[23932]: Connection reset by 45.117.32.230 port 47900 [preauth]
Sep 25 17:00:13 nativespace-cdp sshd[24255]: Invalid user sysadmin from 185.47.172.95 port 40340
Sep 25 17:00:13 nativespace-cdp sshd[24255]: input_userauth_request: invalid user sysadmin [preauth]
Sep 25 17:00:13 nativespace-cdp sshd[24255]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:00:13 nativespace-cdp sshd[24255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.47.172.95
Sep 25 17:00:14 nativespace-cdp sshd[24251]: Invalid user smart from 45.117.32.230 port 37618
Sep 25 17:00:14 nativespace-cdp sshd[24251]: input_userauth_request: invalid user smart [preauth]
Sep 25 17:00:14 nativespace-cdp sshd[24251]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:00:14 nativespace-cdp sshd[24251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.117.32.230
Sep 25 17:00:16 nativespace-cdp sshd[24255]: Failed password for invalid user sysadmin from 185.47.172.95 port 40340 ssh2
Sep 25 17:00:16 nativespace-cdp sshd[24255]: Received disconnect from 185.47.172.95 port 40340:11: Bye Bye [preauth]
Sep 25 17:00:16 nativespace-cdp sshd[24255]: Disconnected from 185.47.172.95 port 40340 [preauth]
Sep 25 17:00:16 nativespace-cdp sshd[24251]: Failed password for invalid user smart from 45.117.32.230 port 37618 ssh2
Sep 25 17:00:16 nativespace-cdp sshd[24251]: Received disconnect from 45.117.32.230 port 37618:11: Bye Bye [preauth]
Sep 25 17:00:16 nativespace-cdp sshd[24251]: Disconnected from 45.117.32.230 port 37618 [preauth]
Sep 25 17:00:48 nativespace-cdp sshd[24369]: Invalid user testuser from 51.79.135.112 port 37798
Sep 25 17:00:48 nativespace-cdp sshd[24369]: input_userauth_request: invalid user testuser [preauth]
Sep 25 17:00:48 nativespace-cdp sshd[24369]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:00:48 nativespace-cdp sshd[24369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.135.112
Sep 25 17:00:49 nativespace-cdp sshd[24373]: Invalid user odoo from 197.157.17.151 port 43790
Sep 25 17:00:49 nativespace-cdp sshd[24373]: input_userauth_request: invalid user odoo [preauth]
Sep 25 17:00:49 nativespace-cdp sshd[24373]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:00:49 nativespace-cdp sshd[24373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.157.17.151
Sep 25 17:00:50 nativespace-cdp sshd[24369]: Failed password for invalid user testuser from 51.79.135.112 port 37798 ssh2
Sep 25 17:00:50 nativespace-cdp sshd[24369]: Received disconnect from 51.79.135.112 port 37798:11: Bye Bye [preauth]
Sep 25 17:00:50 nativespace-cdp sshd[24369]: Disconnected from 51.79.135.112 port 37798 [preauth]
Sep 25 17:00:51 nativespace-cdp sshd[24373]: Failed password for invalid user odoo from 197.157.17.151 port 43790 ssh2
Sep 25 17:00:51 nativespace-cdp sshd[24373]: Received disconnect from 197.157.17.151 port 43790:11: Bye Bye [preauth]
Sep 25 17:00:51 nativespace-cdp sshd[24373]: Disconnected from 197.157.17.151 port 43790 [preauth]
Sep 25 17:01:04 nativespace-cdp sshd[24480]: Invalid user princess from 185.47.172.95 port 23242
Sep 25 17:01:04 nativespace-cdp sshd[24480]: input_userauth_request: invalid user princess [preauth]
Sep 25 17:01:04 nativespace-cdp sshd[24480]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:01:04 nativespace-cdp sshd[24480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.47.172.95
Sep 25 17:01:07 nativespace-cdp sshd[24480]: Failed password for invalid user princess from 185.47.172.95 port 23242 ssh2
Sep 25 17:01:07 nativespace-cdp sshd[24480]: Received disconnect from 185.47.172.95 port 23242:11: Bye Bye [preauth]
Sep 25 17:01:07 nativespace-cdp sshd[24480]: Disconnected from 185.47.172.95 port 23242 [preauth]
Sep 25 17:01:27 nativespace-cdp sshd[24545]: Connection closed by 175.207.13.86 port 36106 [preauth]
Sep 25 17:01:33 nativespace-cdp sshd[24649]: Connection closed by 159.100.136.21 port 54362 [preauth]
Sep 25 17:01:37 nativespace-cdp sshd[24663]: Invalid user test from 51.79.135.112 port 52402
Sep 25 17:01:37 nativespace-cdp sshd[24663]: input_userauth_request: invalid user test [preauth]
Sep 25 17:01:37 nativespace-cdp sshd[24663]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:01:37 nativespace-cdp sshd[24663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.135.112
Sep 25 17:01:40 nativespace-cdp sshd[24663]: Failed password for invalid user test from 51.79.135.112 port 52402 ssh2
Sep 25 17:01:41 nativespace-cdp sshd[24663]: Received disconnect from 51.79.135.112 port 52402:11: Bye Bye [preauth]
Sep 25 17:01:41 nativespace-cdp sshd[24663]: Disconnected from 51.79.135.112 port 52402 [preauth]
Sep 25 17:01:47 nativespace-cdp sshd[24803]: Invalid user default from 197.157.17.151 port 50906
Sep 25 17:01:47 nativespace-cdp sshd[24803]: input_userauth_request: invalid user default [preauth]
Sep 25 17:01:47 nativespace-cdp sshd[24803]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:01:47 nativespace-cdp sshd[24803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.157.17.151
Sep 25 17:01:49 nativespace-cdp sshd[24803]: Failed password for invalid user default from 197.157.17.151 port 50906 ssh2
Sep 25 17:03:22 nativespace-cdp sshd[25164]: Connection reset by 175.207.13.86 port 33172 [preauth]
Sep 25 17:06:36 nativespace-cdp sshd[25980]: Connection closed by 159.100.136.21 port 35852 [preauth]
Sep 25 17:06:38 nativespace-cdp sshd[25949]: Connection closed by 175.207.13.86 port 42892 [preauth]
Sep 25 17:08:37 nativespace-cdp sshd[26454]: Connection closed by 175.207.13.86 port 39966 [preauth]
Sep 25 17:09:33 nativespace-cdp sshd[26671]: Invalid user user from 175.207.13.86 port 52610
Sep 25 17:09:33 nativespace-cdp sshd[26671]: input_userauth_request: invalid user user [preauth]
Sep 25 17:09:33 nativespace-cdp sshd[26671]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:09:33 nativespace-cdp sshd[26671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.207.13.86
Sep 25 17:09:34 nativespace-cdp sshd[26671]: Failed password for invalid user user from 175.207.13.86 port 52610 ssh2
Sep 25 17:09:38 nativespace-cdp sshd[26671]: Received disconnect from 175.207.13.86 port 52610:11: Bye Bye [preauth]
Sep 25 17:09:38 nativespace-cdp sshd[26671]: Disconnected from 175.207.13.86 port 52610 [preauth]
Sep 25 17:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 25 17:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:09:56 nativespace-cdp sudo[26750]: pam_unix(sudo:session): session closed for user root
Sep 25 17:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 25 17:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:09:56 nativespace-cdp sudo[26753]: pam_unix(sudo:session): session closed for user root
Sep 25 17:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 25 17:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:09:57 nativespace-cdp sudo[26756]: pam_unix(sudo:session): session closed for user root
Sep 25 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 25 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:09:57 nativespace-cdp sudo[26761]: pam_unix(sudo:session): session closed for user root
Sep 25 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 25 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:00 nativespace-cdp sudo[26764]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 25 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:01 nativespace-cdp sudo[26781]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 25 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:01 nativespace-cdp sudo[26784]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 25 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:01 nativespace-cdp sudo[26787]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 25 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:01 nativespace-cdp sudo[26790]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:01 nativespace-cdp sudo[26793]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 25 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:01 nativespace-cdp sudo[26796]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 17:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:09 nativespace-cdp sudo[26937]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 25 17:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:10 nativespace-cdp sudo[26942]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=attlebor user-2=lucy user-3=onlycont user-4=ranxterc user-5=hodgsonmail user-6=outdoorc user-7=branko user-8=romaldki user-9=tomandle user-10=jennimil user-11=chrisdal user-12=mcdermos user-13=nbhavers user-14=careers user-15=david user-16=oubpgvbx user-17=tstardom user-18=what user-19=cath user-20=sketchy user-21=havantho user-22=nvihkvu user-23=ladburyp user-24=stagingerris user-25=dancinggardener user-26=kategilpin user-27=design user-28=nove user-29=boldover user-30=bakery user-31=sosevalu user-32=crrtipdl user-33=burydropin user-34=fawcettd user-35=nsceres user-36=beauty user-37=eatspam user-38=darkstar user-39=dhyana user-40=asandcoc user-41=sibtoncc user-42=bwppodcast user-43=zebrapho user-44=steve user-45=cathski user-46=cambria1 user-47=reliable user-48=ninejimm user-49=howardon
Sep 25 17:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=paulmca1 user-51=pugwash user-52=cwsocial user-53=hirefootballgame user-54=eugincou user-55=courseme user-56=nscdp user-57=fortunaz user-58=health2045 user-59=leftie user-60=foods user-61=lkpier user-62=philmcph user-63=ctedorgu user-64=firstre5 user-65=steakbridieme user-66=donnychicago user-67=smrszyqg user-68=isleofwi user-69=hidden user-70=nomistakes user-71=tigerlet user-72=barbersh user-73=gilpin user-74=milloyco user-75=elecleis user-76=hubmaster user-77=carsinyo user-78=fetch user-79=accooper user-80=ianrayne user-81=connectedshoppin user-82=thqkgnbz user-83=jonhartl user-84=seftvta user-85=ultbcrra user-86=firstres user-87=coursemc user-88=opaiscyx user-89=firstrel user-90=clarkass user-91=costestimatorco user-92=firstred user-93=southlon user-94=highlegh user-95=alexadmin user-96=skyfirec user-97=innovat1 user-98=stuartge user-99=askhform user-100=nativene user-101=brighto1 user-102=nstriton
Sep 25 17:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstre2 user-104=vivienn1 user-105=battlere user-106=oneoarco user-107=bedfords user-108=belle user-109=ggaaorgu user-110=newstoda user-111=bemadonn user-112=jarvisin user-113=spectrum user-114=theblack user-115=hodgesonweb user-116=still user-117=agproduc user-118=stephani user-119=leereyn1 user-120=foundation user-121=markward user-122=booff user-123=athenare user-124=connect9 user-125=vantagep user-126=maflemin user-127=lbscrmod user-128=ulsukarm user-129=martsblo user-130=dickemery123 user-131=ptkxhsbt user-132=lbhyisi user-133=hhdugcor user-134=magichat user-135=lakesan1 user-136=brmrjxl user-137=strathar user-138=sarafoundation user-139=atestord user-140=wilsonsw user-141=musorguk user-142=megacards feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 25 17:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 25 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:11 nativespace-cdp sudo[26949]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 17:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:12 nativespace-cdp sudo[26957]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qs6l5TYYQwQBNiEs.~
Sep 25 17:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:12 nativespace-cdp sudo[26960]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qs6l5TYYQwQBNiEs.~'
Sep 25 17:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:12 nativespace-cdp sudo[26963]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qs6l5TYYQwQBNiEs.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 17:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:12 nativespace-cdp sudo[26968]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 25 17:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:12 nativespace-cdp sudo[26971]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 25 17:10:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 17:10:43 nativespace-cdp sudo[27151]: pam_unix(sudo:session): session closed for user root
Sep 25 17:10:46 nativespace-cdp sshd[27096]: Connection closed by 175.207.13.86 port 37028 [preauth]
Sep 25 17:11:34 nativespace-cdp sshd[27353]: Connection closed by 159.100.136.21 port 45466 [preauth]
Sep 25 17:12:31 nativespace-cdp sshd[27605]: Invalid user ubuntu from 175.207.13.86 port 34094
Sep 25 17:12:31 nativespace-cdp sshd[27605]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 17:12:31 nativespace-cdp sshd[27605]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:12:31 nativespace-cdp sshd[27605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.207.13.86
Sep 25 17:12:33 nativespace-cdp sshd[27605]: Failed password for invalid user ubuntu from 175.207.13.86 port 34094 ssh2
Sep 25 17:12:33 nativespace-cdp sshd[27605]: Received disconnect from 175.207.13.86 port 34094:11: Bye Bye [preauth]
Sep 25 17:12:33 nativespace-cdp sshd[27605]: Disconnected from 175.207.13.86 port 34094 [preauth]
Sep 25 17:16:36 nativespace-cdp sshd[28968]: Connection closed by 159.100.136.21 port 54710 [preauth]
Sep 25 17:21:34 nativespace-cdp sshd[30227]: Connection closed by 159.100.136.21 port 34644 [preauth]
Sep 25 17:26:36 nativespace-cdp sshd[31379]: Connection closed by 159.100.136.21 port 43980 [preauth]
Sep 25 17:31:33 nativespace-cdp sshd[543]: Connection closed by 159.100.136.21 port 53002 [preauth]
Sep 25 17:35:25 nativespace-cdp sshd[1633]: Invalid user postgres from 103.101.160.198 port 38926
Sep 25 17:35:25 nativespace-cdp sshd[1633]: input_userauth_request: invalid user postgres [preauth]
Sep 25 17:35:25 nativespace-cdp sshd[1633]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:35:25 nativespace-cdp sshd[1633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198
Sep 25 17:35:27 nativespace-cdp sshd[1633]: Failed password for invalid user postgres from 103.101.160.198 port 38926 ssh2
Sep 25 17:35:28 nativespace-cdp sshd[1633]: Received disconnect from 103.101.160.198 port 38926:11: Bye Bye [preauth]
Sep 25 17:35:28 nativespace-cdp sshd[1633]: Disconnected from 103.101.160.198 port 38926 [preauth]
Sep 25 17:36:35 nativespace-cdp sshd[1919]: Connection closed by 159.100.136.21 port 34224 [preauth]
Sep 25 17:36:40 nativespace-cdp sshd[1938]: Invalid user nextcloud from 200.108.132.134 port 59976
Sep 25 17:36:40 nativespace-cdp sshd[1938]: input_userauth_request: invalid user nextcloud [preauth]
Sep 25 17:36:40 nativespace-cdp sshd[1938]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:36:40 nativespace-cdp sshd[1938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.132.134
Sep 25 17:36:42 nativespace-cdp sshd[1938]: Failed password for invalid user nextcloud from 200.108.132.134 port 59976 ssh2
Sep 25 17:36:50 nativespace-cdp sshd[1938]: Received disconnect from 200.108.132.134 port 59976:11: Bye Bye [preauth]
Sep 25 17:36:50 nativespace-cdp sshd[1938]: Disconnected from 200.108.132.134 port 59976 [preauth]
Sep 25 17:39:24 nativespace-cdp sshd[2555]: Connection closed by 200.108.132.134 port 59672 [preauth]
Sep 25 17:39:25 nativespace-cdp sshd[2578]: Connection closed by 103.101.160.198 port 48804 [preauth]
Sep 25 17:40:10 nativespace-cdp sshd[2827]: Invalid user portal from 103.101.160.198 port 33116
Sep 25 17:40:10 nativespace-cdp sshd[2827]: input_userauth_request: invalid user portal [preauth]
Sep 25 17:40:10 nativespace-cdp sshd[2827]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:40:10 nativespace-cdp sshd[2827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198
Sep 25 17:40:12 nativespace-cdp sshd[2827]: Failed password for invalid user portal from 103.101.160.198 port 33116 ssh2
Sep 25 17:40:13 nativespace-cdp sshd[2827]: Received disconnect from 103.101.160.198 port 33116:11: Bye Bye [preauth]
Sep 25 17:40:13 nativespace-cdp sshd[2827]: Disconnected from 103.101.160.198 port 33116 [preauth]
Sep 25 17:40:19 nativespace-cdp sshd[2850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.132.134  user=root
Sep 25 17:40:19 nativespace-cdp sshd[2850]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 17:40:20 nativespace-cdp sshd[2850]: Failed password for root from 200.108.132.134 port 41546 ssh2
Sep 25 17:40:21 nativespace-cdp sshd[2850]: Received disconnect from 200.108.132.134 port 41546:11: Bye Bye [preauth]
Sep 25 17:40:21 nativespace-cdp sshd[2850]: Disconnected from 200.108.132.134 port 41546 [preauth]
Sep 25 17:40:57 nativespace-cdp sshd[3009]: Invalid user postgres from 103.101.160.198 port 45656
Sep 25 17:40:57 nativespace-cdp sshd[3009]: input_userauth_request: invalid user postgres [preauth]
Sep 25 17:40:57 nativespace-cdp sshd[3009]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:40:57 nativespace-cdp sshd[3009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198
Sep 25 17:40:58 nativespace-cdp sshd[3009]: Failed password for invalid user postgres from 103.101.160.198 port 45656 ssh2
Sep 25 17:41:02 nativespace-cdp sshd[3009]: Received disconnect from 103.101.160.198 port 45656:11: Bye Bye [preauth]
Sep 25 17:41:02 nativespace-cdp sshd[3009]: Disconnected from 103.101.160.198 port 45656 [preauth]
Sep 25 17:41:07 nativespace-cdp sshd[3045]: Invalid user mosquitto from 200.108.132.134 port 43232
Sep 25 17:41:07 nativespace-cdp sshd[3045]: input_userauth_request: invalid user mosquitto [preauth]
Sep 25 17:41:07 nativespace-cdp sshd[3045]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 17:41:07 nativespace-cdp sshd[3045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.132.134
Sep 25 17:41:08 nativespace-cdp sshd[3045]: Failed password for invalid user mosquitto from 200.108.132.134 port 43232 ssh2
Sep 25 17:41:09 nativespace-cdp sshd[3045]: Received disconnect from 200.108.132.134 port 43232:11: Bye Bye [preauth]
Sep 25 17:41:09 nativespace-cdp sshd[3045]: Disconnected from 200.108.132.134 port 43232 [preauth]
Sep 25 17:41:33 nativespace-cdp sshd[3159]: Connection closed by 159.100.136.21 port 43758 [preauth]
Sep 25 17:46:33 nativespace-cdp sshd[4762]: Connection closed by 159.100.136.21 port 52684 [preauth]
Sep 25 17:51:34 nativespace-cdp sshd[6003]: Connection closed by 159.100.136.21 port 33760 [preauth]
Sep 25 17:56:33 nativespace-cdp sshd[7543]: Connection closed by 159.100.136.21 port 42824 [preauth]
Sep 25 18:01:33 nativespace-cdp sshd[9312]: Connection closed by 159.100.136.21 port 51922 [preauth]
Sep 25 18:06:34 nativespace-cdp sshd[10626]: Connection closed by 159.100.136.21 port 33352 [preauth]
Sep 25 18:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 25 18:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:09:51 nativespace-cdp sudo[11399]: pam_unix(sudo:session): session closed for user root
Sep 25 18:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 25 18:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:09:51 nativespace-cdp sudo[11402]: pam_unix(sudo:session): session closed for user root
Sep 25 18:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 25 18:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:09:52 nativespace-cdp sudo[11405]: pam_unix(sudo:session): session closed for user root
Sep 25 18:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 25 18:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:09:52 nativespace-cdp sudo[11410]: pam_unix(sudo:session): session closed for user root
Sep 25 18:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 25 18:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:16 nativespace-cdp sudo[11413]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 25 18:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:16 nativespace-cdp sudo[11646]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 25 18:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:16 nativespace-cdp sudo[11649]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 25 18:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:16 nativespace-cdp sudo[11652]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 25 18:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:16 nativespace-cdp sudo[11656]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 18:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:16 nativespace-cdp sudo[11659]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 25 18:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:16 nativespace-cdp sudo[11662]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 18:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:19 nativespace-cdp sudo[11675]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 25 18:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:20 nativespace-cdp sudo[11680]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dhyana user-2=eatspam user-3=darkstar user-4=beauty user-5=nsceres user-6=burydropin user-7=fawcettd user-8=steve user-9=zebrapho user-10=bwppodcast user-11=asandcoc user-12=sibtoncc user-13=courseme user-14=eugincou user-15=hirefootballgame user-16=howardon user-17=paulmca1 user-18=pugwash user-19=cwsocial user-20=ninejimm user-21=reliable user-22=cathski user-23=cambria1 user-24=barbersh user-25=tigerlet user-26=hidden user-27=nomistakes user-28=isleofwi user-29=smrszyqg user-30=philmcph user-31=ctedorgu user-32=firstre5 user-33=steakbridieme user-34=donnychicago user-35=lkpier user-36=health2045 user-37=fortunaz user-38=foods user-39=leftie user-40=nscdp user-41=romaldki user-42=branko user-43=outdoorc user-44=ranxterc user-45=hodgsonmail user-46=onlycont user-47=attlebor user-48=lucy
Sep 25 18:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=careers user-50=nbhavers user-51=david user-52=mcdermos user-53=chrisdal user-54=jennimil user-55=tomandle user-56=design user-57=kategilpin user-58=ladburyp user-59=stagingerris user-60=dancinggardener user-61=nvihkvu user-62=cath user-63=sketchy user-64=havantho user-65=what user-66=oubpgvbx user-67=tstardom user-68=sosevalu user-69=crrtipdl user-70=bakery user-71=boldover user-72=nove user-73=leereyn1 user-74=stephani user-75=still user-76=agproduc user-77=theblack user-78=hodgesonweb user-79=spectrum user-80=jarvisin user-81=ulsukarm user-82=maflemin user-83=lbscrmod user-84=connect9 user-85=athenare user-86=vantagep user-87=markward user-88=booff user-89=foundation user-90=magichat user-91=lbhyisi user-92=hhdugcor user-93=ptkxhsbt user-94=dickemery123 user-95=martsblo user-96=musorguk user-97=megacards user-98=wilsonsw user-99=sarafoundation user-100=atestord user-101=strathar user-102=brmrjxl
Sep 25 18:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=lakesan1 user-104=thqkgnbz user-105=connectedshoppin user-106=ianrayne user-107=accooper user-108=carsinyo user-109=fetch user-110=hubmaster user-111=elecleis user-112=gilpin user-113=milloyco user-114=southlon user-115=highlegh user-116=firstred user-117=costestimatorco user-118=clarkass user-119=firstrel user-120=opaiscyx user-121=coursemc user-122=firstres user-123=jonhartl user-124=seftvta user-125=ultbcrra user-126=nativene user-127=stuartge user-128=askhform user-129=innovat1 user-130=alexadmin user-131=skyfirec user-132=bemadonn user-133=ggaaorgu user-134=belle user-135=newstoda user-136=bedfords user-137=battlere user-138=oneoarco user-139=firstre2 user-140=vivienn1 user-141=brighto1 user-142=nstriton feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 25 18:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 25 18:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:21 nativespace-cdp sudo[11687]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 18:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:22 nativespace-cdp sudo[11702]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ipafwZGrqnQMbOoA.~
Sep 25 18:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:22 nativespace-cdp sudo[11705]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ipafwZGrqnQMbOoA.~'
Sep 25 18:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:22 nativespace-cdp sudo[11708]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ipafwZGrqnQMbOoA.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 18:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:22 nativespace-cdp sudo[11712]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 25 18:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:22 nativespace-cdp sudo[11715]: pam_unix(sudo:session): session closed for user root
Sep 25 18:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 25 18:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 18:10:40 nativespace-cdp sudo[11795]: pam_unix(sudo:session): session closed for user root
Sep 25 18:11:33 nativespace-cdp sshd[12091]: Connection closed by 159.100.136.21 port 42742 [preauth]
Sep 25 18:16:34 nativespace-cdp sshd[13676]: Connection closed by 159.100.136.21 port 51904 [preauth]
Sep 25 18:21:33 nativespace-cdp sshd[14975]: Connection closed by 159.100.136.21 port 32982 [preauth]
Sep 25 18:26:33 nativespace-cdp sshd[16037]: Connection closed by 159.100.136.21 port 42698 [preauth]
Sep 25 18:31:33 nativespace-cdp sshd[17552]: Connection closed by 159.100.136.21 port 51778 [preauth]
Sep 25 18:36:33 nativespace-cdp sshd[18675]: Connection closed by 159.100.136.21 port 33188 [preauth]
Sep 25 18:41:33 nativespace-cdp sshd[19813]: Connection closed by 159.100.136.21 port 42546 [preauth]
Sep 25 18:46:33 nativespace-cdp sshd[21242]: Connection closed by 159.100.136.21 port 52138 [preauth]
Sep 25 18:51:33 nativespace-cdp sshd[22407]: Connection closed by 159.100.136.21 port 33424 [preauth]
Sep 25 18:56:33 nativespace-cdp sshd[23428]: Connection closed by 159.100.136.21 port 42714 [preauth]
Sep 25 19:01:34 nativespace-cdp sshd[25437]: Connection closed by 159.100.136.21 port 52232 [preauth]
Sep 25 19:06:34 nativespace-cdp sshd[26802]: Connection closed by 159.100.136.21 port 33852 [preauth]
Sep 25 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 25 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:09:56 nativespace-cdp sudo[27478]: pam_unix(sudo:session): session closed for user root
Sep 25 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 25 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:09:56 nativespace-cdp sudo[27481]: pam_unix(sudo:session): session closed for user root
Sep 25 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 25 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:09:58 nativespace-cdp sudo[27484]: pam_unix(sudo:session): session closed for user root
Sep 25 19:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 25 19:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:09:58 nativespace-cdp sudo[27491]: pam_unix(sudo:session): session closed for user root
Sep 25 19:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 25 19:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:01 nativespace-cdp sudo[27494]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 25 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:01 nativespace-cdp sudo[27506]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 25 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:01 nativespace-cdp sudo[27509]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 25 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:01 nativespace-cdp sudo[27513]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 25 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:01 nativespace-cdp sudo[27516]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:01 nativespace-cdp sudo[27519]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 25 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:01 nativespace-cdp sudo[27522]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 19:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:06 nativespace-cdp sudo[27643]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 25 19:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:07 nativespace-cdp sudo[27666]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dickemery123 user-2=ptkxhsbt user-3=martsblo user-4=magichat user-5=hhdugcor user-6=lbhyisi user-7=strathar user-8=atestord user-9=sarafoundation user-10=brmrjxl user-11=lakesan1 user-12=megacards user-13=musorguk user-14=wilsonsw user-15=spectrum user-16=theblack user-17=hodgesonweb user-18=jarvisin user-19=stephani user-20=leereyn1 user-21=agproduc user-22=still user-23=vantagep user-24=connect9 user-25=athenare user-26=lbscrmod user-27=maflemin user-28=markward user-29=foundation user-30=booff user-31=ulsukarm user-32=skyfirec user-33=alexadmin user-34=nativene user-35=innovat1 user-36=askhform user-37=stuartge user-38=vivienn1 user-39=firstre2 user-40=oneoarco user-41=battlere user-42=nstriton user-43=brighto1 user-44=newstoda user-45=ggaaorgu user-46=belle user-47=bemadonn user-48=bedfords
Sep 25 19:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=hubmaster user-50=fetch user-51=carsinyo user-52=gilpin user-53=milloyco user-54=elecleis user-55=connectedshoppin user-56=thqkgnbz user-57=accooper user-58=ianrayne user-59=opaiscyx user-60=coursemc user-61=ultbcrra user-62=jonhartl user-63=seftvta user-64=firstres user-65=firstred user-66=highlegh user-67=southlon user-68=firstrel user-69=clarkass user-70=costestimatorco user-71=cwsocial user-72=pugwash user-73=paulmca1 user-74=howardon user-75=cambria1 user-76=cathski user-77=ninejimm user-78=reliable user-79=eugincou user-80=courseme user-81=hirefootballgame user-82=lkpier user-83=firstre5 user-84=donnychicago user-85=steakbridieme user-86=philmcph user-87=ctedorgu user-88=nscdp user-89=foods user-90=leftie user-91=health2045 user-92=fortunaz user-93=nomistakes user-94=hidden user-95=tigerlet user-96=barbersh user-97=isleofwi user-98=smrszyqg user-99=nsceres user-100=fawcettd user-101=burydropin
Sep 25 19:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=beauty user-104=darkstar user-105=eatspam user-106=sibtoncc user-107=asandcoc user-108=steve user-109=bwppodcast user-110=zebrapho user-111=havantho user-112=cath user-113=sketchy user-114=nvihkvu user-115=tstardom user-116=oubpgvbx user-117=what user-118=design user-119=stagingerris user-120=dancinggardener user-121=ladburyp user-122=kategilpin user-123=boldover user-124=nove user-125=bakery user-126=crrtipdl user-127=sosevalu user-128=onlycont user-129=lucy user-130=attlebor user-131=romaldki user-132=ranxterc user-133=hodgsonmail user-134=outdoorc user-135=branko user-136=jennimil user-137=tomandle user-138=david user-139=careers user-140=nbhavers user-141=chrisdal user-142=mcdermos feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 25 19:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 25 19:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:09 nativespace-cdp sudo[27672]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 19:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:10 nativespace-cdp sudo[27680]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mJxvIBYI8DzRwVJ2.~
Sep 25 19:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:10 nativespace-cdp sudo[27683]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mJxvIBYI8DzRwVJ2.~'
Sep 25 19:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:10 nativespace-cdp sudo[27687]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-mJxvIBYI8DzRwVJ2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 19:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:10 nativespace-cdp sudo[27691]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 25 19:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:10 nativespace-cdp sudo[27694]: pam_unix(sudo:session): session closed for user root
Sep 25 19:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 25 19:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 19:10:22 nativespace-cdp sudo[27737]: pam_unix(sudo:session): session closed for user root
Sep 25 19:11:36 nativespace-cdp sshd[28015]: Connection closed by 159.100.136.21 port 42572 [preauth]
Sep 25 19:16:33 nativespace-cdp sshd[29284]: Connection closed by 159.100.136.21 port 51264 [preauth]
Sep 25 19:21:33 nativespace-cdp sshd[30465]: Connection closed by 159.100.136.21 port 59676 [preauth]
Sep 25 19:26:35 nativespace-cdp sshd[31618]: Connection closed by 159.100.136.21 port 40738 [preauth]
Sep 25 19:31:33 nativespace-cdp sshd[687]: Connection closed by 159.100.136.21 port 50080 [preauth]
Sep 25 19:36:33 nativespace-cdp sshd[1783]: Connection closed by 159.100.136.21 port 58714 [preauth]
Sep 25 19:41:33 nativespace-cdp sshd[2922]: Connection closed by 159.100.136.21 port 39428 [preauth]
Sep 25 19:46:33 nativespace-cdp sshd[4440]: Connection closed by 159.100.136.21 port 49194 [preauth]
Sep 25 19:51:33 nativespace-cdp sshd[5605]: Connection closed by 159.100.136.21 port 58144 [preauth]
Sep 25 19:56:35 nativespace-cdp sshd[6719]: Connection closed by 159.100.136.21 port 39498 [preauth]
Sep 25 20:01:34 nativespace-cdp sshd[8322]: Connection closed by 159.100.136.21 port 48454 [preauth]
Sep 25 20:06:35 nativespace-cdp sshd[9529]: Connection closed by 159.100.136.21 port 57324 [preauth]
Sep 25 20:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 25 20:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:51 nativespace-cdp sudo[10157]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 25 20:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:51 nativespace-cdp sudo[10163]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 25 20:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:52 nativespace-cdp sudo[10166]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 25 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:52 nativespace-cdp sudo[10170]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 25 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:54 nativespace-cdp sudo[10174]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 25 20:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:54 nativespace-cdp sudo[10185]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 25 20:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:54 nativespace-cdp sudo[10188]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 25 20:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:54 nativespace-cdp sudo[10191]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 25 20:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:54 nativespace-cdp sudo[10194]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 20:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:54 nativespace-cdp sudo[10197]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 25 20:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:54 nativespace-cdp sudo[10200]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 20:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:56 nativespace-cdp sudo[10212]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 25 20:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:57 nativespace-cdp sudo[10218]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=health2045 user-2=fortunaz user-3=foods user-4=leftie user-5=nscdp user-6=philmcph user-7=ctedorgu user-8=firstre5 user-9=donnychicago user-10=steakbridieme user-11=lkpier user-12=isleofwi user-13=smrszyqg user-14=tigerlet user-15=barbersh user-16=hidden user-17=nomistakes user-18=ninejimm user-19=reliable user-20=cambria1 user-21=cathski user-22=paulmca1 user-23=pugwash user-24=howardon user-25=cwsocial user-26=hirefootballgame user-27=courseme user-28=eugincou user-29=asandcoc user-30=sibtoncc user-31=zebrapho user-32=bwppodcast user-33=steve user-34=burydropin user-35=fawcettd user-36=nsceres user-37=eatspam user-38=darkstar user-39=beauty user-40=dhyana user-41=nove user-42=boldover user-43=sosevalu user-44=crrtipdl user-45=bakery user-46=what user-47=tstardom user-48=oubpgvbx
Sep 25 20:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=nvihkvu user-50=cath user-51=sketchy user-52=havantho user-53=kategilpin user-54=ladburyp user-55=stagingerris user-56=dancinggardener user-57=design user-58=tomandle user-59=jennimil user-60=mcdermos user-61=chrisdal user-62=careers user-63=nbhavers user-64=david user-65=attlebor user-66=lucy user-67=onlycont user-68=branko user-69=hodgsonmail user-70=outdoorc user-71=ranxterc user-72=romaldki user-73=lakesan1 user-74=brmrjxl user-75=sarafoundation user-76=atestord user-77=strathar user-78=wilsonsw user-79=musorguk user-80=megacards user-81=martsblo user-82=ptkxhsbt user-83=dickemery123 user-84=lbhyisi user-85=hhdugcor user-86=magichat user-87=markward user-88=foundation user-89=booff user-90=maflemin user-91=lbscrmod user-92=athenare user-93=connect9 user-94=vantagep user-95=ulsukarm user-96=jarvisin user-97=theblack user-98=hodgesonweb user-99=spectrum user-100=still user-101=agproduc user-102=leereyn1
Sep 25 20:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=stephani user-104=brighto1 user-105=nstriton user-106=battlere user-107=oneoarco user-108=firstre2 user-109=vivienn1 user-110=bedfords user-111=bemadonn user-112=belle user-113=ggaaorgu user-114=newstoda user-115=alexadmin user-116=skyfirec user-117=stuartge user-118=askhform user-119=innovat1 user-120=nativene user-121=firstres user-122=jonhartl user-123=seftvta user-124=ultbcrra user-125=coursemc user-126=opaiscyx user-127=costestimatorco user-128=firstrel user-129=clarkass user-130=southlon user-131=highlegh user-132=firstred user-133=elecleis user-134=milloyco user-135=gilpin user-136=carsinyo user-137=fetch user-138=hubmaster user-139=ianrayne user-140=accooper user-141=thqkgnbz user-142=connectedshoppin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 25 20:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 25 20:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:58 nativespace-cdp sudo[10222]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:58 nativespace-cdp sudo[10230]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c7thxKrTVAAgKlK2.~
Sep 25 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:58 nativespace-cdp sudo[10233]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c7thxKrTVAAgKlK2.~'
Sep 25 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:58 nativespace-cdp sudo[10236]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c7thxKrTVAAgKlK2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:58 nativespace-cdp sudo[10240]: pam_unix(sudo:session): session closed for user root
Sep 25 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 25 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:09:58 nativespace-cdp sudo[10243]: pam_unix(sudo:session): session closed for user root
Sep 25 20:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 25 20:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 20:10:00 nativespace-cdp sudo[10263]: pam_unix(sudo:session): session closed for user root
Sep 25 20:11:33 nativespace-cdp sshd[10734]: Connection closed by 159.100.136.21 port 38596 [preauth]
Sep 25 20:14:43 nativespace-cdp sshd[11494]: Bad protocol version identification '\003' from 193.3.19.210 port 63713
Sep 25 20:16:36 nativespace-cdp sshd[12051]: Connection closed by 159.100.136.21 port 48142 [preauth]
Sep 25 20:21:33 nativespace-cdp sshd[13260]: Connection closed by 159.100.136.21 port 57444 [preauth]
Sep 25 20:26:33 nativespace-cdp sshd[14390]: Connection closed by 159.100.136.21 port 39092 [preauth]
Sep 25 20:31:34 nativespace-cdp sshd[16037]: Connection closed by 159.100.136.21 port 48730 [preauth]
Sep 25 20:36:33 nativespace-cdp sshd[17282]: Connection closed by 159.100.136.21 port 58510 [preauth]
Sep 25 20:41:33 nativespace-cdp sshd[18380]: Connection closed by 159.100.136.21 port 38846 [preauth]
Sep 25 20:46:33 nativespace-cdp sshd[19622]: Connection closed by 159.100.136.21 port 48382 [preauth]
Sep 25 20:51:33 nativespace-cdp sshd[20957]: Connection closed by 159.100.136.21 port 57448 [preauth]
Sep 25 20:56:33 nativespace-cdp sshd[22128]: Connection closed by 159.100.136.21 port 38704 [preauth]
Sep 25 21:01:35 nativespace-cdp sshd[23907]: Connection closed by 159.100.136.21 port 48134 [preauth]
Sep 25 21:02:52 nativespace-cdp sshd[24367]: Did not receive identification string from 87.236.176.133 port 57311
Sep 25 21:02:52 nativespace-cdp sshd[24378]: Connection closed by 87.236.176.133 port 49987 [preauth]
Sep 25 21:06:33 nativespace-cdp sshd[25377]: Connection closed by 159.100.136.21 port 58028 [preauth]
Sep 25 21:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 25 21:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:09:58 nativespace-cdp sudo[26231]: pam_unix(sudo:session): session closed for user root
Sep 25 21:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 25 21:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:09:58 nativespace-cdp sudo[26234]: pam_unix(sudo:session): session closed for user root
Sep 25 21:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 25 21:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:00 nativespace-cdp sudo[26237]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 25 21:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:00 nativespace-cdp sudo[26245]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 25 21:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:06 nativespace-cdp sudo[26248]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 25 21:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:06 nativespace-cdp sudo[26389]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 25 21:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:06 nativespace-cdp sudo[26393]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 25 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:07 nativespace-cdp sudo[26397]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 25 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:07 nativespace-cdp sudo[26400]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:07 nativespace-cdp sudo[26404]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 25 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:07 nativespace-cdp sudo[26407]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 21:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:11 nativespace-cdp sudo[26424]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 25 21:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:12 nativespace-cdp sudo[26432]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstre2 user-2=vivienn1 user-3=battlere user-4=oneoarco user-5=brighto1 user-6=nstriton user-7=ggaaorgu user-8=belle user-9=newstoda user-10=bemadonn user-11=bedfords user-12=skyfirec user-13=alexadmin user-14=nativene user-15=innovat1 user-16=askhform user-17=stuartge user-18=coursemc user-19=opaiscyx user-20=seftvta user-21=jonhartl user-22=ultbcrra user-23=firstres user-24=firstred user-25=southlon user-26=highlegh user-27=clarkass user-28=firstrel user-29=costestimatorco user-30=hubmaster user-31=carsinyo user-32=fetch user-33=gilpin user-34=milloyco user-35=elecleis user-36=connectedshoppin user-37=thqkgnbz user-38=accooper user-39=ianrayne user-40=strathar user-41=sarafoundation user-42=atestord user-43=lakesan1 user-44=brmrjxl user-45=musorguk user-46=megacards user-47=wilsonsw
Sep 25 21:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=dickemery123 user-49=ptkxhsbt user-50=martsblo user-51=magichat user-52=lbhyisi user-53=hhdugcor user-54=athenare user-55=connect9 user-56=vantagep user-57=maflemin user-58=lbscrmod user-59=markward user-60=foundation user-61=booff user-62=ulsukarm user-63=spectrum user-64=hodgesonweb user-65=theblack user-66=jarvisin user-67=stephani user-68=leereyn1 user-69=still user-70=agproduc user-71=boldover user-72=nove user-73=bakery user-74=sosevalu user-75=crrtipdl user-76=sketchy user-77=cath user-78=havantho user-79=nvihkvu user-80=oubpgvbx user-81=tstardom user-82=what user-83=design user-84=ladburyp user-85=dancinggardener user-86=stagingerris user-87=kategilpin user-88=jennimil user-89=tomandle user-90=nbhavers user-91=careers user-92=david user-93=chrisdal user-94=mcdermos user-95=onlycont user-96=attlebor user-97=lucy user-98=romaldki user-99=outdoorc user-100=ranxterc user-101=hodgsonmail
Sep 25 21:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=branko user-103=lkpier user-104=philmcph user-105=ctedorgu user-106=steakbridieme user-107=firstre5 user-108=donnychicago user-109=nscdp user-110=health2045 user-111=fortunaz user-112=foods user-113=leftie user-114=hidden user-115=nomistakes user-116=tigerlet user-117=barbersh user-118=smrszyqg user-119=isleofwi user-120=paulmca1 user-121=howardon user-122=pugwash user-123=cwsocial user-124=cambria1 user-125=cathski user-126=ninejimm user-127=reliable user-128=eugincou user-129=courseme user-130=hirefootballgame user-131=asandcoc user-132=sibtoncc user-133=steve user-134=bwppodcast user-135=zebrapho user-136=nsceres user-137=burydropin user-138=fawcettd user-139=dhyana user-140=beauty user-141=eatspam user-142=darkstar feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 25 21:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 25 21:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:14 nativespace-cdp sudo[26438]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:14 nativespace-cdp sudo[26448]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UgV5lTdkvMP1epNA.~
Sep 25 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:14 nativespace-cdp sudo[26451]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UgV5lTdkvMP1epNA.~'
Sep 25 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:14 nativespace-cdp sudo[26454]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UgV5lTdkvMP1epNA.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:14 nativespace-cdp sudo[26459]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 25 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:14 nativespace-cdp sudo[26463]: pam_unix(sudo:session): session closed for user root
Sep 25 21:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 25 21:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:10:39 nativespace-cdp sudo[26545]: pam_unix(sudo:session): session closed for user root
Sep 25 21:11:33 nativespace-cdp sshd[26754]: Connection closed by 159.100.136.21 port 38988 [preauth]
Sep 25 21:16:35 nativespace-cdp sshd[28129]: Connection closed by 159.100.136.21 port 48592 [preauth]
Sep 25 21:21:33 nativespace-cdp sshd[29529]: Connection closed by 159.100.136.21 port 58036 [preauth]
Sep 25 21:26:33 nativespace-cdp sshd[30545]: Connection closed by 159.100.136.21 port 39278 [preauth]
Sep 25 21:31:34 nativespace-cdp sshd[32176]: Connection closed by 159.100.136.21 port 47934 [preauth]
Sep 25 21:36:34 nativespace-cdp sshd[936]: Connection closed by 159.100.136.21 port 57272 [preauth]
Sep 25 21:41:33 nativespace-cdp sshd[2376]: Connection closed by 159.100.136.21 port 38388 [preauth]
Sep 25 21:44:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 21:44:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:44:05 nativespace-cdp sudo[3290]: pam_unix(sudo:session): session closed for user root
Sep 25 21:44:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status ulsukarm
Sep 25 21:44:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 21:44:06 nativespace-cdp sudo[3294]: pam_unix(sudo:session): session closed for user root
Sep 25 21:46:33 nativespace-cdp sshd[3918]: Connection closed by 159.100.136.21 port 46904 [preauth]
Sep 25 21:51:34 nativespace-cdp sshd[5059]: Connection closed by 159.100.136.21 port 56142 [preauth]
Sep 25 21:56:33 nativespace-cdp sshd[6198]: Connection closed by 159.100.136.21 port 37206 [preauth]
Sep 25 22:01:33 nativespace-cdp sshd[7870]: Connection closed by 159.100.136.21 port 46904 [preauth]
Sep 25 22:06:34 nativespace-cdp sshd[9067]: Connection closed by 159.100.136.21 port 56736 [preauth]
Sep 25 22:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 25 22:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:09:57 nativespace-cdp sudo[9737]: pam_unix(sudo:session): session closed for user root
Sep 25 22:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 25 22:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:09:57 nativespace-cdp sudo[9741]: pam_unix(sudo:session): session closed for user root
Sep 25 22:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 25 22:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:09:58 nativespace-cdp sudo[9744]: pam_unix(sudo:session): session closed for user root
Sep 25 22:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 25 22:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:09:58 nativespace-cdp sudo[9749]: pam_unix(sudo:session): session closed for user root
Sep 25 22:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 25 22:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:00 nativespace-cdp sudo[9752]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 25 22:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:01 nativespace-cdp sudo[9763]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 25 22:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:01 nativespace-cdp sudo[9766]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 25 22:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:01 nativespace-cdp sudo[9770]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 25 22:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:01 nativespace-cdp sudo[9773]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 22:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:01 nativespace-cdp sudo[9776]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 25 22:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:01 nativespace-cdp sudo[9779]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 22:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:03 nativespace-cdp sudo[9904]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 25 22:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:04 nativespace-cdp sudo[9912]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=careers user-2=nbhavers user-3=david user-4=mcdermos user-5=chrisdal user-6=jennimil user-7=tomandle user-8=romaldki user-9=branko user-10=outdoorc user-11=ranxterc user-12=hodgsonmail user-13=onlycont user-14=attlebor user-15=lucy user-16=sosevalu user-17=crrtipdl user-18=bakery user-19=boldover user-20=nove user-21=design user-22=kategilpin user-23=ladburyp user-24=stagingerris user-25=dancinggardener user-26=nvihkvu user-27=cath user-28=sketchy user-29=havantho user-30=what user-31=oubpgvbx user-32=tstardom user-33=steve user-34=zebrapho user-35=bwppodcast user-36=sibtoncc user-37=asandcoc user-38=dhyana user-39=eatspam user-40=darkstar user-41=beauty user-42=nsceres user-43=burydropin user-44=fawcettd user-45=barbersh user-46=tigerlet user-47=hidden user-48=nomistakes user-49=isleofwi
Sep 25 22:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=smrszyqg user-51=philmcph user-52=ctedorgu user-53=firstre5 user-54=steakbridieme user-55=donnychicago user-56=lkpier user-57=fortunaz user-58=health2045 user-59=leftie user-60=foods user-61=nscdp user-62=courseme user-63=eugincou user-64=hirefootballgame user-65=howardon user-66=pugwash user-67=paulmca1 user-68=cwsocial user-69=reliable user-70=ninejimm user-71=cathski user-72=cambria1 user-73=southlon user-74=highlegh user-75=firstred user-76=costestimatorco user-77=clarkass user-78=firstrel user-79=opaiscyx user-80=coursemc user-81=firstres user-82=jonhartl user-83=seftvta user-84=ultbcrra user-85=thqkgnbz user-86=connectedshoppin user-87=ianrayne user-88=accooper user-89=carsinyo user-90=fetch user-91=hubmaster user-92=elecleis user-93=gilpin user-94=milloyco user-95=bemadonn user-96=ggaaorgu user-97=belle user-98=newstoda user-99=bedfords user-100=battlere user-101=oneoarco user-102=firstre2
Sep 25 22:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=vivienn1 user-104=brighto1 user-105=nstriton user-106=nativene user-107=stuartge user-108=askhform user-109=innovat1 user-110=skyfirec user-111=alexadmin user-112=ulsukarm user-113=maflemin user-114=lbscrmod user-115=athenare user-116=connect9 user-117=vantagep user-118=booff user-119=markward user-120=foundation user-121=leereyn1 user-122=stephani user-123=still user-124=agproduc user-125=hodgesonweb user-126=theblack user-127=spectrum user-128=jarvisin user-129=musorguk user-130=megacards user-131=wilsonsw user-132=sarafoundation user-133=atestord user-134=strathar user-135=brmrjxl user-136=lakesan1 user-137=magichat user-138=lbhyisi user-139=hhdugcor user-140=ptkxhsbt user-141=dickemery123 user-142=martsblo feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 25 22:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 25 22:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:06 nativespace-cdp sudo[9918]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 22:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:07 nativespace-cdp sudo[9936]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-isGd4J7PGTcGjGvg.~
Sep 25 22:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:07 nativespace-cdp sudo[9939]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-isGd4J7PGTcGjGvg.~'
Sep 25 22:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:07 nativespace-cdp sudo[9942]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-isGd4J7PGTcGjGvg.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 22:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:07 nativespace-cdp sudo[9946]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 25 22:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:07 nativespace-cdp sudo[9949]: pam_unix(sudo:session): session closed for user root
Sep 25 22:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 25 22:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 22:10:24 nativespace-cdp sudo[10059]: pam_unix(sudo:session): session closed for user root
Sep 25 22:11:33 nativespace-cdp sshd[10282]: Connection closed by 159.100.136.21 port 37708 [preauth]
Sep 25 22:16:33 nativespace-cdp sshd[11878]: Connection closed by 159.100.136.21 port 46838 [preauth]
Sep 25 22:21:33 nativespace-cdp sshd[13054]: Connection closed by 159.100.136.21 port 55962 [preauth]
Sep 25 22:26:33 nativespace-cdp sshd[14086]: Connection closed by 159.100.136.21 port 37214 [preauth]
Sep 25 22:31:36 nativespace-cdp sshd[15627]: Connection closed by 159.100.136.21 port 46550 [preauth]
Sep 25 22:36:36 nativespace-cdp sshd[16739]: Connection closed by 159.100.136.21 port 55978 [preauth]
Sep 25 22:41:33 nativespace-cdp sshd[17757]: Connection closed by 159.100.136.21 port 37266 [preauth]
Sep 25 22:46:33 nativespace-cdp sshd[19293]: Connection closed by 159.100.136.21 port 47116 [preauth]
Sep 25 22:51:33 nativespace-cdp sshd[20545]: Connection closed by 159.100.136.21 port 56306 [preauth]
Sep 25 22:56:33 nativespace-cdp sshd[21724]: Connection closed by 159.100.136.21 port 37336 [preauth]
Sep 25 23:01:33 nativespace-cdp sshd[23241]: Connection closed by 159.100.136.21 port 46696 [preauth]
Sep 25 23:06:33 nativespace-cdp sshd[24330]: Connection closed by 159.100.136.21 port 56044 [preauth]
Sep 25 23:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 25 23:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:51 nativespace-cdp sudo[24966]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 25 23:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:51 nativespace-cdp sudo[24969]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 25 23:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:52 nativespace-cdp sudo[24972]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 25 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:52 nativespace-cdp sudo[24979]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 25 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:55 nativespace-cdp sudo[24982]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 25 23:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:55 nativespace-cdp sudo[24996]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 25 23:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:55 nativespace-cdp sudo[24999]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 25 23:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:55 nativespace-cdp sudo[25002]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 25 23:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:55 nativespace-cdp sudo[25006]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 25 23:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:55 nativespace-cdp sudo[25009]: pam_unix(sudo:session): session closed for user root
Sep 25 23:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 25 23:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:09:55 nativespace-cdp sudo[25012]: pam_unix(sudo:session): session closed for user root
Sep 25 23:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 25 23:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:10:12 nativespace-cdp sudo[25192]: pam_unix(sudo:session): session closed for user root
Sep 25 23:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 25 23:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:10:13 nativespace-cdp sudo[25198]: pam_unix(sudo:session): session closed for user root
Sep 25 23:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=crrtipdl user-2=sosevalu user-3=bakery user-4=boldover user-5=nove user-6=design user-7=kategilpin user-8=dancinggardener user-9=stagingerris user-10=ladburyp user-11=nvihkvu user-12=havantho user-13=sketchy user-14=cath user-15=what user-16=tstardom user-17=oubpgvbx user-18=david user-19=careers user-20=nbhavers user-21=mcdermos user-22=chrisdal user-23=jennimil user-24=tomandle user-25=romaldki user-26=branko user-27=ranxterc user-28=hodgsonmail user-29=outdoorc user-30=onlycont user-31=lucy user-32=attlebor user-33=tigerlet user-34=barbersh user-35=nomistakes user-36=hidden user-37=smrszyqg user-38=isleofwi user-39=steakbridieme user-40=firstre5 user-41=donnychicago user-42=ctedorgu user-43=philmcph user-44=lkpier user-45=foods user-46=leftie user-47=health2045 user-48=fortunaz user-49=nscdp
Sep 25 23:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=courseme user-51=eugincou user-52=hirefootballgame user-53=cwsocial user-54=paulmca1 user-55=pugwash user-56=howardon user-57=ninejimm user-58=reliable user-59=cambria1 user-60=cathski user-61=steve user-62=zebrapho user-63=bwppodcast user-64=asandcoc user-65=sibtoncc user-66=dhyana user-67=darkstar user-68=eatspam user-69=beauty user-70=nsceres user-71=fawcettd user-72=burydropin user-73=bemadonn user-74=newstoda user-75=ggaaorgu user-76=belle user-77=bedfords user-78=oneoarco user-79=battlere user-80=vivienn1 user-81=firstre2 user-82=nstriton user-83=brighto1 user-84=nativene user-85=stuartge user-86=askhform user-87=innovat1 user-88=skyfirec user-89=alexadmin user-90=highlegh user-91=southlon user-92=firstred user-93=costestimatorco user-94=firstrel user-95=clarkass user-96=coursemc user-97=opaiscyx user-98=firstres user-99=ultbcrra user-100=seftvta user-101=jonhartl user-102=thqkgnbz
Sep 25 23:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=connectedshoppin user-104=ianrayne user-105=accooper user-106=fetch user-107=carsinyo user-108=hubmaster user-109=elecleis user-110=gilpin user-111=milloyco user-112=megacards user-113=musorguk user-114=wilsonsw user-115=atestord user-116=sarafoundation user-117=strathar user-118=lakesan1 user-119=brmrjxl user-120=magichat user-121=hhdugcor user-122=lbhyisi user-123=ptkxhsbt user-124=dickemery123 user-125=martsblo user-126=ulsukarm user-127=lbscrmod user-128=maflemin user-129=vantagep user-130=athenare user-131=connect9 user-132=booff user-133=markward user-134=foundation user-135=leereyn1 user-136=stephani user-137=agproduc user-138=still user-139=hodgesonweb user-140=theblack user-141=spectrum user-142=jarvisin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 25 23:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 25 23:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:10:14 nativespace-cdp sudo[25205]: pam_unix(sudo:session): session closed for user root
Sep 25 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:10:14 nativespace-cdp sudo[25218]: pam_unix(sudo:session): session closed for user root
Sep 25 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sJ4t9rQhcj4jSluW.~
Sep 25 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:10:14 nativespace-cdp sudo[25222]: pam_unix(sudo:session): session closed for user root
Sep 25 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sJ4t9rQhcj4jSluW.~'
Sep 25 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:10:14 nativespace-cdp sudo[25225]: pam_unix(sudo:session): session closed for user root
Sep 25 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sJ4t9rQhcj4jSluW.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 25 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:10:14 nativespace-cdp sudo[25231]: pam_unix(sudo:session): session closed for user root
Sep 25 23:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 25 23:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:10:15 nativespace-cdp sudo[25234]: pam_unix(sudo:session): session closed for user root
Sep 25 23:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 25 23:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 25 23:10:25 nativespace-cdp sudo[25279]: pam_unix(sudo:session): session closed for user root
Sep 25 23:11:34 nativespace-cdp sshd[25566]: Connection closed by 159.100.136.21 port 36786 [preauth]
Sep 25 23:16:33 nativespace-cdp sshd[27121]: Connection closed by 159.100.136.21 port 45628 [preauth]
Sep 25 23:21:33 nativespace-cdp sshd[28209]: Connection closed by 159.100.136.21 port 55264 [preauth]
Sep 25 23:26:33 nativespace-cdp sshd[29279]: Connection closed by 159.100.136.21 port 35542 [preauth]
Sep 25 23:31:35 nativespace-cdp sshd[30796]: Connection closed by 159.100.136.21 port 45158 [preauth]
Sep 25 23:35:54 nativespace-cdp sshd[31733]: Invalid user ekp from 159.65.147.20 port 33288
Sep 25 23:35:54 nativespace-cdp sshd[31733]: input_userauth_request: invalid user ekp [preauth]
Sep 25 23:35:54 nativespace-cdp sshd[31733]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:35:54 nativespace-cdp sshd[31733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.147.20
Sep 25 23:35:56 nativespace-cdp sshd[31733]: Failed password for invalid user ekp from 159.65.147.20 port 33288 ssh2
Sep 25 23:35:56 nativespace-cdp sshd[31733]: Received disconnect from 159.65.147.20 port 33288:11: Bye Bye [preauth]
Sep 25 23:35:56 nativespace-cdp sshd[31733]: Disconnected from 159.65.147.20 port 33288 [preauth]
Sep 25 23:36:11 nativespace-cdp sshd[31776]: Invalid user test from 119.252.143.6 port 43842
Sep 25 23:36:11 nativespace-cdp sshd[31776]: input_userauth_request: invalid user test [preauth]
Sep 25 23:36:11 nativespace-cdp sshd[31776]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:36:11 nativespace-cdp sshd[31776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.252.143.6
Sep 25 23:36:13 nativespace-cdp sshd[31776]: Failed password for invalid user test from 119.252.143.6 port 43842 ssh2
Sep 25 23:36:13 nativespace-cdp sshd[31776]: Received disconnect from 119.252.143.6 port 43842:11: Bye Bye [preauth]
Sep 25 23:36:13 nativespace-cdp sshd[31776]: Disconnected from 119.252.143.6 port 43842 [preauth]
Sep 25 23:36:32 nativespace-cdp sshd[31813]: Invalid user deploy from 68.183.234.223 port 57076
Sep 25 23:36:32 nativespace-cdp sshd[31813]: input_userauth_request: invalid user deploy [preauth]
Sep 25 23:36:32 nativespace-cdp sshd[31813]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:36:32 nativespace-cdp sshd[31813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.234.223
Sep 25 23:36:33 nativespace-cdp sshd[31819]: Connection closed by 159.100.136.21 port 53724 [preauth]
Sep 25 23:36:34 nativespace-cdp sshd[31813]: Failed password for invalid user deploy from 68.183.234.223 port 57076 ssh2
Sep 25 23:36:41 nativespace-cdp sshd[31813]: Received disconnect from 68.183.234.223 port 57076:11: Bye Bye [preauth]
Sep 25 23:36:41 nativespace-cdp sshd[31813]: Disconnected from 68.183.234.223 port 57076 [preauth]
Sep 25 23:37:44 nativespace-cdp sshd[31984]: Invalid user tg from 157.173.199.224 port 40450
Sep 25 23:37:44 nativespace-cdp sshd[31984]: input_userauth_request: invalid user tg [preauth]
Sep 25 23:37:44 nativespace-cdp sshd[31984]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:37:44 nativespace-cdp sshd[31984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.199.224
Sep 25 23:37:46 nativespace-cdp sshd[31984]: Failed password for invalid user tg from 157.173.199.224 port 40450 ssh2
Sep 25 23:37:46 nativespace-cdp sshd[31984]: Received disconnect from 157.173.199.224 port 40450:11: Bye Bye [preauth]
Sep 25 23:37:46 nativespace-cdp sshd[31984]: Disconnected from 157.173.199.224 port 40450 [preauth]
Sep 25 23:38:23 nativespace-cdp sshd[32084]: Invalid user sysadmin from 134.209.27.56 port 33098
Sep 25 23:38:23 nativespace-cdp sshd[32084]: input_userauth_request: invalid user sysadmin [preauth]
Sep 25 23:38:23 nativespace-cdp sshd[32084]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:38:23 nativespace-cdp sshd[32084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.27.56
Sep 25 23:38:24 nativespace-cdp sshd[32084]: Failed password for invalid user sysadmin from 134.209.27.56 port 33098 ssh2
Sep 25 23:38:24 nativespace-cdp sshd[32084]: Received disconnect from 134.209.27.56 port 33098:11: Bye Bye [preauth]
Sep 25 23:38:24 nativespace-cdp sshd[32084]: Disconnected from 134.209.27.56 port 33098 [preauth]
Sep 25 23:40:49 nativespace-cdp sshd[32705]: Invalid user ubuntu from 134.209.27.56 port 34446
Sep 25 23:40:49 nativespace-cdp sshd[32705]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 23:40:49 nativespace-cdp sshd[32705]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:40:49 nativespace-cdp sshd[32705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.27.56
Sep 25 23:40:51 nativespace-cdp sshd[32705]: Failed password for invalid user ubuntu from 134.209.27.56 port 34446 ssh2
Sep 25 23:40:53 nativespace-cdp sshd[32705]: Received disconnect from 134.209.27.56 port 34446:11: Bye Bye [preauth]
Sep 25 23:40:53 nativespace-cdp sshd[32705]: Disconnected from 134.209.27.56 port 34446 [preauth]
Sep 25 23:40:58 nativespace-cdp sshd[307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.147.20  user=root
Sep 25 23:40:58 nativespace-cdp sshd[307]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 25 23:41:01 nativespace-cdp sshd[307]: Failed password for root from 159.65.147.20 port 44034 ssh2
Sep 25 23:41:03 nativespace-cdp sshd[307]: Received disconnect from 159.65.147.20 port 44034:11: Bye Bye [preauth]
Sep 25 23:41:03 nativespace-cdp sshd[307]: Disconnected from 159.65.147.20 port 44034 [preauth]
Sep 25 23:41:16 nativespace-cdp sshd[354]: Invalid user user from 119.252.143.6 port 12099
Sep 25 23:41:16 nativespace-cdp sshd[354]: input_userauth_request: invalid user user [preauth]
Sep 25 23:41:16 nativespace-cdp sshd[354]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:41:16 nativespace-cdp sshd[354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.252.143.6
Sep 25 23:41:18 nativespace-cdp sshd[354]: Failed password for invalid user user from 119.252.143.6 port 12099 ssh2
Sep 25 23:41:23 nativespace-cdp sshd[354]: Received disconnect from 119.252.143.6 port 12099:11: Bye Bye [preauth]
Sep 25 23:41:23 nativespace-cdp sshd[354]: Disconnected from 119.252.143.6 port 12099 [preauth]
Sep 25 23:41:23 nativespace-cdp sshd[376]: Invalid user username from 157.173.199.224 port 40616
Sep 25 23:41:23 nativespace-cdp sshd[376]: input_userauth_request: invalid user username [preauth]
Sep 25 23:41:23 nativespace-cdp sshd[376]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:41:23 nativespace-cdp sshd[376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.199.224
Sep 25 23:41:25 nativespace-cdp sshd[376]: Failed password for invalid user username from 157.173.199.224 port 40616 ssh2
Sep 25 23:41:25 nativespace-cdp sshd[376]: Received disconnect from 157.173.199.224 port 40616:11: Bye Bye [preauth]
Sep 25 23:41:25 nativespace-cdp sshd[376]: Disconnected from 157.173.199.224 port 40616 [preauth]
Sep 25 23:41:31 nativespace-cdp sshd[397]: Invalid user ubuntu from 134.209.27.56 port 49044
Sep 25 23:41:31 nativespace-cdp sshd[397]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 23:41:31 nativespace-cdp sshd[397]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:41:31 nativespace-cdp sshd[397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.27.56
Sep 25 23:41:32 nativespace-cdp sshd[403]: Connection closed by 68.183.234.223 port 34806 [preauth]
Sep 25 23:41:33 nativespace-cdp sshd[397]: Failed password for invalid user ubuntu from 134.209.27.56 port 49044 ssh2
Sep 25 23:41:33 nativespace-cdp sshd[446]: Connection closed by 159.100.136.21 port 34302 [preauth]
Sep 25 23:41:47 nativespace-cdp sshd[471]: Invalid user support from 159.65.147.20 port 46468
Sep 25 23:41:47 nativespace-cdp sshd[471]: input_userauth_request: invalid user support [preauth]
Sep 25 23:41:47 nativespace-cdp sshd[471]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:41:47 nativespace-cdp sshd[471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.147.20
Sep 25 23:41:49 nativespace-cdp sshd[471]: Failed password for invalid user support from 159.65.147.20 port 46468 ssh2
Sep 25 23:42:12 nativespace-cdp sshd[592]: Invalid user ubuntu from 119.252.143.6 port 19376
Sep 25 23:42:12 nativespace-cdp sshd[592]: input_userauth_request: invalid user ubuntu [preauth]
Sep 25 23:42:12 nativespace-cdp sshd[592]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:42:12 nativespace-cdp sshd[592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.252.143.6
Sep 25 23:42:14 nativespace-cdp sshd[592]: Failed password for invalid user ubuntu from 119.252.143.6 port 19376 ssh2
Sep 25 23:42:17 nativespace-cdp sshd[598]: Invalid user test from 68.183.234.223 port 56202
Sep 25 23:42:17 nativespace-cdp sshd[598]: input_userauth_request: invalid user test [preauth]
Sep 25 23:42:17 nativespace-cdp sshd[598]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:42:17 nativespace-cdp sshd[598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.234.223
Sep 25 23:42:18 nativespace-cdp sshd[598]: Failed password for invalid user test from 68.183.234.223 port 56202 ssh2
Sep 25 23:42:18 nativespace-cdp sshd[598]: Received disconnect from 68.183.234.223 port 56202:11: Bye Bye [preauth]
Sep 25 23:42:18 nativespace-cdp sshd[598]: Disconnected from 68.183.234.223 port 56202 [preauth]
Sep 25 23:42:19 nativespace-cdp sshd[592]: Received disconnect from 119.252.143.6 port 19376:11: Bye Bye [preauth]
Sep 25 23:42:19 nativespace-cdp sshd[592]: Disconnected from 119.252.143.6 port 19376 [preauth]
Sep 25 23:42:51 nativespace-cdp sshd[709]: Invalid user svn from 157.173.199.224 port 40742
Sep 25 23:42:51 nativespace-cdp sshd[709]: input_userauth_request: invalid user svn [preauth]
Sep 25 23:42:51 nativespace-cdp sshd[709]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:42:51 nativespace-cdp sshd[709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.199.224
Sep 25 23:42:53 nativespace-cdp sshd[709]: Failed password for invalid user svn from 157.173.199.224 port 40742 ssh2
Sep 25 23:42:53 nativespace-cdp sshd[709]: Received disconnect from 157.173.199.224 port 40742:11: Bye Bye [preauth]
Sep 25 23:42:53 nativespace-cdp sshd[709]: Disconnected from 157.173.199.224 port 40742 [preauth]
Sep 25 23:42:53 nativespace-cdp sshd[717]: Invalid user support from 68.183.234.223 port 48514
Sep 25 23:42:53 nativespace-cdp sshd[717]: input_userauth_request: invalid user support [preauth]
Sep 25 23:42:53 nativespace-cdp sshd[717]: pam_unix(sshd:auth): check pass; user unknown
Sep 25 23:42:53 nativespace-cdp sshd[717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.234.223
Sep 25 23:42:55 nativespace-cdp sshd[717]: Failed password for invalid user support from 68.183.234.223 port 48514 ssh2
Sep 25 23:42:55 nativespace-cdp sshd[717]: Received disconnect from 68.183.234.223 port 48514:11: Bye Bye [preauth]
Sep 25 23:42:55 nativespace-cdp sshd[717]: Disconnected from 68.183.234.223 port 48514 [preauth]
Sep 25 23:46:34 nativespace-cdp sshd[2105]: Connection closed by 159.100.136.21 port 43674 [preauth]
Sep 25 23:51:33 nativespace-cdp sshd[3172]: Connection closed by 159.100.136.21 port 52884 [preauth]
Sep 25 23:56:33 nativespace-cdp sshd[4176]: Connection closed by 159.100.136.21 port 33522 [preauth]
Sep 26 00:01:36 nativespace-cdp sshd[5586]: Connection closed by 159.100.136.21 port 42594 [preauth]
Sep 26 00:06:33 nativespace-cdp sshd[6883]: Connection closed by 159.100.136.21 port 51998 [preauth]
Sep 26 00:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 00:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:09:55 nativespace-cdp sudo[7581]: pam_unix(sudo:session): session closed for user root
Sep 26 00:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 00:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:09:55 nativespace-cdp sudo[7587]: pam_unix(sudo:session): session closed for user root
Sep 26 00:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 00:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:09:57 nativespace-cdp sudo[7590]: pam_unix(sudo:session): session closed for user root
Sep 26 00:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 00:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:09:57 nativespace-cdp sudo[7595]: pam_unix(sudo:session): session closed for user root
Sep 26 00:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 00:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:15 nativespace-cdp sudo[7598]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 00:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:15 nativespace-cdp sudo[7840]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 00:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:15 nativespace-cdp sudo[7843]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 00:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:15 nativespace-cdp sudo[7846]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 00:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:15 nativespace-cdp sudo[7849]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 00:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:15 nativespace-cdp sudo[7852]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 00:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:15 nativespace-cdp sudo[7855]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 00:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:22 nativespace-cdp sudo[7879]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 00:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:23 nativespace-cdp sudo[7884]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=lbhyisi user-2=hhdugcor user-3=magichat user-4=martsblo user-5=dickemery123 user-6=ptkxhsbt user-7=wilsonsw user-8=musorguk user-9=megacards user-10=lakesan1 user-11=brmrjxl user-12=strathar user-13=sarafoundation user-14=atestord user-15=still user-16=agproduc user-17=stephani user-18=leereyn1 user-19=jarvisin user-20=spectrum user-21=theblack user-22=hodgesonweb user-23=ulsukarm user-24=foundation user-25=markward user-26=booff user-27=athenare user-28=connect9 user-29=vantagep user-30=maflemin user-31=lbscrmod user-32=innovat1 user-33=stuartge user-34=askhform user-35=nativene user-36=alexadmin user-37=skyfirec user-38=bedfords user-39=ggaaorgu user-40=belle user-41=newstoda user-42=bemadonn user-43=brighto1 user-44=nstriton user-45=firstre2 user-46=vivienn1 user-47=battlere user-48=oneoarco
Sep 26 00:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=accooper user-50=ianrayne user-51=connectedshoppin user-52=thqkgnbz user-53=milloyco user-54=gilpin user-55=elecleis user-56=hubmaster user-57=carsinyo user-58=fetch user-59=clarkass user-60=firstrel user-61=costestimatorco user-62=firstred user-63=southlon user-64=highlegh user-65=jonhartl user-66=seftvta user-67=ultbcrra user-68=firstres user-69=opaiscyx user-70=coursemc user-71=hirefootballgame user-72=eugincou user-73=courseme user-74=cathski user-75=cambria1 user-76=reliable user-77=ninejimm user-78=paulmca1 user-79=pugwash user-80=howardon user-81=cwsocial user-82=smrszyqg user-83=isleofwi user-84=hidden user-85=nomistakes user-86=tigerlet user-87=barbersh user-88=nscdp user-89=fortunaz user-90=health2045 user-91=leftie user-92=foods user-93=lkpier user-94=ctedorgu user-95=philmcph user-96=donnychicago user-97=firstre5 user-98=steakbridieme user-99=beauty user-100=eatspam user-101=darkstar
Sep 26 00:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=burydropin user-104=fawcettd user-105=nsceres user-106=bwppodcast user-107=zebrapho user-108=steve user-109=sibtoncc user-110=asandcoc user-111=ladburyp user-112=dancinggardener user-113=stagingerris user-114=kategilpin user-115=design user-116=oubpgvbx user-117=tstardom user-118=what user-119=sketchy user-120=cath user-121=havantho user-122=nvihkvu user-123=bakery user-124=sosevalu user-125=crrtipdl user-126=nove user-127=boldover user-128=hodgsonmail user-129=ranxterc user-130=outdoorc user-131=branko user-132=romaldki user-133=attlebor user-134=lucy user-135=onlycont user-136=chrisdal user-137=mcdermos user-138=careers user-139=nbhavers user-140=david user-141=tomandle user-142=jennimil feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 00:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 00:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:25 nativespace-cdp sudo[7890]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 00:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:25 nativespace-cdp sudo[7895]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jR8SEISirtPQIZbt.~
Sep 26 00:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:25 nativespace-cdp sudo[7898]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jR8SEISirtPQIZbt.~'
Sep 26 00:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:25 nativespace-cdp sudo[7901]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jR8SEISirtPQIZbt.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 00:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:25 nativespace-cdp sudo[7906]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 00:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:25 nativespace-cdp sudo[7910]: pam_unix(sudo:session): session closed for user root
Sep 26 00:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 00:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 00:10:36 nativespace-cdp sudo[7954]: pam_unix(sudo:session): session closed for user root
Sep 26 00:11:33 nativespace-cdp sshd[8115]: Connection closed by 159.100.136.21 port 60504 [preauth]
Sep 26 00:16:33 nativespace-cdp sshd[9613]: Connection closed by 159.100.136.21 port 41640 [preauth]
Sep 26 00:21:33 nativespace-cdp sshd[10638]: Connection closed by 159.100.136.21 port 50560 [preauth]
Sep 26 00:26:33 nativespace-cdp sshd[11690]: Connection closed by 159.100.136.21 port 60204 [preauth]
Sep 26 00:31:33 nativespace-cdp sshd[13152]: Connection closed by 159.100.136.21 port 41514 [preauth]
Sep 26 00:36:33 nativespace-cdp sshd[14203]: Connection closed by 159.100.136.21 port 50794 [preauth]
Sep 26 00:41:35 nativespace-cdp sshd[15253]: Connection closed by 159.100.136.21 port 59710 [preauth]
Sep 26 00:46:35 nativespace-cdp sshd[16668]: Connection closed by 159.100.136.21 port 40902 [preauth]
Sep 26 00:51:33 nativespace-cdp sshd[17658]: Connection closed by 159.100.136.21 port 50030 [preauth]
Sep 26 00:56:33 nativespace-cdp sshd[18648]: Connection closed by 159.100.136.21 port 59078 [preauth]
Sep 26 01:01:33 nativespace-cdp sshd[20223]: Connection closed by 159.100.136.21 port 40342 [preauth]
Sep 26 01:06:33 nativespace-cdp sshd[21261]: Connection closed by 159.100.136.21 port 50214 [preauth]
Sep 26 01:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 01:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:09:55 nativespace-cdp sudo[21903]: pam_unix(sudo:session): session closed for user root
Sep 26 01:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 01:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:09:55 nativespace-cdp sudo[21907]: pam_unix(sudo:session): session closed for user root
Sep 26 01:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 01:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:09:57 nativespace-cdp sudo[21910]: pam_unix(sudo:session): session closed for user root
Sep 26 01:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 01:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:09:57 nativespace-cdp sudo[21915]: pam_unix(sudo:session): session closed for user root
Sep 26 01:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 01:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:00 nativespace-cdp sudo[21918]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 01:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:00 nativespace-cdp sudo[21933]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 01:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:00 nativespace-cdp sudo[21936]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 01:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:00 nativespace-cdp sudo[21939]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 01:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:01 nativespace-cdp sudo[21942]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 01:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:01 nativespace-cdp sudo[21945]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 01:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:01 nativespace-cdp sudo[21949]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 01:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:05 nativespace-cdp sudo[22075]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 01:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:07 nativespace-cdp sudo[22091]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=fawcettd user-2=burydropin user-3=nsceres user-4=beauty user-5=darkstar user-6=eatspam user-7=dhyana user-8=sibtoncc user-9=asandcoc user-10=bwppodcast user-11=zebrapho user-12=steve user-13=cambria1 user-14=cathski user-15=ninejimm user-16=reliable user-17=cwsocial user-18=pugwash user-19=paulmca1 user-20=howardon user-21=hirefootballgame user-22=eugincou user-23=courseme user-24=nscdp user-25=leftie user-26=foods user-27=fortunaz user-28=health2045 user-29=lkpier user-30=firstre5 user-31=donnychicago user-32=steakbridieme user-33=philmcph user-34=ctedorgu user-35=smrszyqg user-36=isleofwi user-37=nomistakes user-38=hidden user-39=tigerlet user-40=barbersh user-41=lucy user-42=attlebor user-43=onlycont user-44=hodgsonmail user-45=outdoorc user-46=ranxterc user-47=branko user-48=romaldki
Sep 26 01:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tomandle user-50=jennimil user-51=chrisdal user-52=mcdermos user-53=david user-54=nbhavers user-55=careers user-56=oubpgvbx user-57=tstardom user-58=what user-59=havantho user-60=cath user-61=sketchy user-62=nvihkvu user-63=stagingerris user-64=dancinggardener user-65=ladburyp user-66=kategilpin user-67=design user-68=nove user-69=boldover user-70=bakery user-71=crrtipdl user-72=sosevalu user-73=jarvisin user-74=spectrum user-75=hodgesonweb user-76=theblack user-77=agproduc user-78=still user-79=stephani user-80=leereyn1 user-81=booff user-82=markward user-83=foundation user-84=vantagep user-85=athenare user-86=connect9 user-87=lbscrmod user-88=maflemin user-89=ulsukarm user-90=martsblo user-91=dickemery123 user-92=ptkxhsbt user-93=hhdugcor user-94=lbhyisi user-95=magichat user-96=lakesan1 user-97=brmrjxl user-98=strathar user-99=atestord user-100=sarafoundation user-101=wilsonsw user-102=megacards
Sep 26 01:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=musorguk user-104=milloyco user-105=gilpin user-106=elecleis user-107=hubmaster user-108=fetch user-109=carsinyo user-110=accooper user-111=ianrayne user-112=connectedshoppin user-113=thqkgnbz user-114=ultbcrra user-115=jonhartl user-116=seftvta user-117=firstres user-118=coursemc user-119=opaiscyx user-120=firstrel user-121=clarkass user-122=costestimatorco user-123=firstred user-124=highlegh user-125=southlon user-126=alexadmin user-127=skyfirec user-128=innovat1 user-129=stuartge user-130=askhform user-131=nativene user-132=nstriton user-133=brighto1 user-134=vivienn1 user-135=firstre2 user-136=oneoarco user-137=battlere user-138=bedfords user-139=newstoda user-140=ggaaorgu user-141=belle user-142=bemadonn feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 01:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 01:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:08 nativespace-cdp sudo[22100]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:09 nativespace-cdp sudo[22106]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TtTiZodXq2HrJZDR.~
Sep 26 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:09 nativespace-cdp sudo[22110]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TtTiZodXq2HrJZDR.~'
Sep 26 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:09 nativespace-cdp sudo[22113]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TtTiZodXq2HrJZDR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:09 nativespace-cdp sudo[22117]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:09 nativespace-cdp sudo[22121]: pam_unix(sudo:session): session closed for user root
Sep 26 01:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 01:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 01:10:22 nativespace-cdp sudo[22175]: pam_unix(sudo:session): session closed for user root
Sep 26 01:11:33 nativespace-cdp sshd[22421]: Connection closed by 159.100.136.21 port 59714 [preauth]
Sep 26 01:16:33 nativespace-cdp sshd[23850]: Connection closed by 159.100.136.21 port 40114 [preauth]
Sep 26 01:21:34 nativespace-cdp sshd[24832]: Connection closed by 159.100.136.21 port 49106 [preauth]
Sep 26 01:26:37 nativespace-cdp sshd[25823]: Connection closed by 159.100.136.21 port 58518 [preauth]
Sep 26 01:31:36 nativespace-cdp sshd[27139]: Connection closed by 159.100.136.21 port 38838 [preauth]
Sep 26 01:36:36 nativespace-cdp sshd[28735]: Connection closed by 159.100.136.21 port 48314 [preauth]
Sep 26 01:41:33 nativespace-cdp sshd[29965]: Connection closed by 159.100.136.21 port 57236 [preauth]
Sep 26 01:46:33 nativespace-cdp sshd[31438]: Connection closed by 159.100.136.21 port 38370 [preauth]
Sep 26 01:51:35 nativespace-cdp sshd[32715]: Connection closed by 159.100.136.21 port 47286 [preauth]
Sep 26 01:56:33 nativespace-cdp sshd[1330]: Connection closed by 159.100.136.21 port 56714 [preauth]
Sep 26 02:01:33 nativespace-cdp sshd[3050]: Connection closed by 159.100.136.21 port 37592 [preauth]
Sep 26 02:06:33 nativespace-cdp sshd[4427]: Connection closed by 159.100.136.21 port 46682 [preauth]
Sep 26 02:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 02:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:51 nativespace-cdp sudo[5008]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 02:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:51 nativespace-cdp sudo[5012]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 02:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:52 nativespace-cdp sudo[5016]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 02:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:52 nativespace-cdp sudo[5022]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 02:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:56 nativespace-cdp sudo[5025]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:56 nativespace-cdp sudo[5042]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:56 nativespace-cdp sudo[5045]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:56 nativespace-cdp sudo[5048]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:56 nativespace-cdp sudo[5052]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:56 nativespace-cdp sudo[5055]: pam_unix(sudo:session): session closed for user root
Sep 26 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:09:56 nativespace-cdp sudo[5058]: pam_unix(sudo:session): session closed for user root
Sep 26 02:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 02:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:10:04 nativespace-cdp sudo[5210]: pam_unix(sudo:session): session closed for user root
Sep 26 02:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 02:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:10:04 nativespace-cdp sudo[5226]: pam_unix(sudo:session): session closed for user root
Sep 26 02:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=costestimatorco user-2=firstrel user-3=clarkass user-4=southlon user-5=highlegh user-6=firstred user-7=firstres user-8=seftvta user-9=jonhartl user-10=ultbcrra user-11=opaiscyx user-12=coursemc user-13=ianrayne user-14=accooper user-15=thqkgnbz user-16=connectedshoppin user-17=elecleis user-18=milloyco user-19=gilpin user-20=carsinyo user-21=fetch user-22=hubmaster user-23=bedfords user-24=bemadonn user-25=ggaaorgu user-26=belle user-27=newstoda user-28=brighto1 user-29=nstriton user-30=battlere user-31=oneoarco user-32=firstre2 user-33=vivienn1 user-34=askhform user-35=stuartge user-36=innovat1 user-37=nativene user-38=skyfirec user-39=alexadmin user-40=ulsukarm user-41=foundation user-42=markward user-43=booff user-44=maflemin user-45=lbscrmod user-46=connect9 user-47=athenare user-48=vantagep
Sep 26 02:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=still user-50=agproduc user-51=leereyn1 user-52=stephani user-53=jarvisin user-54=hodgesonweb user-55=theblack user-56=spectrum user-57=wilsonsw user-58=musorguk user-59=megacards user-60=brmrjxl user-61=lakesan1 user-62=sarafoundation user-63=atestord user-64=strathar user-65=lbhyisi user-66=hhdugcor user-67=magichat user-68=martsblo user-69=ptkxhsbt user-70=dickemery123 user-71=mcdermos user-72=chrisdal user-73=careers user-74=nbhavers user-75=david user-76=tomandle user-77=jennimil user-78=branko user-79=outdoorc user-80=ranxterc user-81=hodgsonmail user-82=romaldki user-83=attlebor user-84=lucy user-85=onlycont user-86=sosevalu user-87=crrtipdl user-88=bakery user-89=nove user-90=boldover user-91=kategilpin user-92=ladburyp user-93=stagingerris user-94=dancinggardener user-95=design user-96=what user-97=oubpgvbx user-98=tstardom user-99=nvihkvu user-100=cath user-101=sketchy user-102=havantho
Sep 26 02:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=zebrapho user-104=bwppodcast user-105=steve user-106=sibtoncc user-107=asandcoc user-108=eatspam user-109=darkstar user-110=beauty user-111=dhyana user-112=burydropin user-113=fawcettd user-114=nsceres user-115=smrszyqg user-116=isleofwi user-117=tigerlet user-118=barbersh user-119=hidden user-120=nomistakes user-121=health2045 user-122=fortunaz user-123=leftie user-124=foods user-125=nscdp user-126=philmcph user-127=ctedorgu user-128=steakbridieme user-129=donnychicago user-130=firstre5 user-131=lkpier user-132=hirefootballgame user-133=courseme user-134=eugincou user-135=ninejimm user-136=reliable user-137=cathski user-138=cambria1 user-139=pugwash user-140=howardon user-141=paulmca1 user-142=cwsocial feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 02:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 02:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:10:05 nativespace-cdp sudo[5250]: pam_unix(sudo:session): session closed for user root
Sep 26 02:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 02:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:10:06 nativespace-cdp sudo[5301]: pam_unix(sudo:session): session closed for user root
Sep 26 02:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EkASpGlONMz2n0IT.~
Sep 26 02:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:10:06 nativespace-cdp sudo[5304]: pam_unix(sudo:session): session closed for user root
Sep 26 02:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EkASpGlONMz2n0IT.~'
Sep 26 02:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:10:06 nativespace-cdp sudo[5307]: pam_unix(sudo:session): session closed for user root
Sep 26 02:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EkASpGlONMz2n0IT.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 02:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:10:06 nativespace-cdp sudo[5312]: pam_unix(sudo:session): session closed for user root
Sep 26 02:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 02:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:10:06 nativespace-cdp sudo[5315]: pam_unix(sudo:session): session closed for user root
Sep 26 02:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 02:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:10:20 nativespace-cdp sudo[5372]: pam_unix(sudo:session): session closed for user root
Sep 26 02:11:33 nativespace-cdp sshd[5687]: Connection closed by 159.100.136.21 port 55320 [preauth]
Sep 26 02:16:36 nativespace-cdp sshd[7142]: Connection closed by 159.100.136.21 port 36240 [preauth]
Sep 26 02:21:33 nativespace-cdp sshd[8189]: Connection closed by 159.100.136.21 port 45528 [preauth]
Sep 26 02:26:33 nativespace-cdp sshd[9196]: Connection closed by 159.100.136.21 port 55034 [preauth]
Sep 26 02:31:33 nativespace-cdp sshd[10669]: Connection closed by 159.100.136.21 port 35612 [preauth]
Sep 26 02:36:33 nativespace-cdp sshd[11752]: Connection closed by 159.100.136.21 port 45364 [preauth]
Sep 26 02:41:33 nativespace-cdp sshd[13325]: Connection closed by 159.100.136.21 port 54570 [preauth]
Sep 26 02:46:33 nativespace-cdp sshd[14941]: Connection closed by 159.100.136.21 port 35962 [preauth]
Sep 26 02:53:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 02:53:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 02:53:03 nativespace-cdp sudo[16480]: pam_unix(sudo:session): session closed for user root
Sep 26 02:56:36 nativespace-cdp sshd[17290]: Connection closed by 159.100.136.21 port 54678 [preauth]
Sep 26 03:01:33 nativespace-cdp sshd[18717]: Connection closed by 159.100.136.21 port 35682 [preauth]
Sep 26 03:06:34 nativespace-cdp sshd[20304]: Connection closed by 159.100.136.21 port 45224 [preauth]
Sep 26 03:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 03:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:50 nativespace-cdp sudo[20832]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 03:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:50 nativespace-cdp sudo[20835]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 03:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:51 nativespace-cdp sudo[20839]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 03:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:51 nativespace-cdp sudo[20843]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 03:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:54 nativespace-cdp sudo[20847]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 03:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:54 nativespace-cdp sudo[20858]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 03:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:54 nativespace-cdp sudo[20861]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 03:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:54 nativespace-cdp sudo[20864]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 03:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:54 nativespace-cdp sudo[20867]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 03:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:54 nativespace-cdp sudo[20871]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 03:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:54 nativespace-cdp sudo[20874]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 03:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:56 nativespace-cdp sudo[20884]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 03:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:56 nativespace-cdp sudo[20890]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steve user-2=zebrapho user-3=bwppodcast user-4=asandcoc user-5=sibtoncc user-6=dhyana user-7=eatspam user-8=darkstar user-9=beauty user-10=nsceres user-11=burydropin user-12=fawcettd user-13=barbersh user-14=tigerlet user-15=hidden user-16=nomistakes user-17=isleofwi user-18=smrszyqg user-19=philmcph user-20=ctedorgu user-21=donnychicago user-22=firstre5 user-23=steakbridieme user-24=lkpier user-25=fortunaz user-26=health2045 user-27=foods user-28=leftie user-29=nscdp user-30=courseme user-31=eugincou user-32=hirefootballgame user-33=pugwash user-34=paulmca1 user-35=howardon user-36=cwsocial user-37=reliable user-38=ninejimm user-39=cambria1 user-40=cathski user-41=nbhavers user-42=careers user-43=david user-44=mcdermos user-45=chrisdal user-46=jennimil user-47=tomandle user-48=romaldki
Sep 26 03:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=branko user-50=ranxterc user-51=outdoorc user-52=hodgsonmail user-53=onlycont user-54=attlebor user-55=lucy user-56=sosevalu user-57=crrtipdl user-58=bakery user-59=boldover user-60=nove user-61=design user-62=kategilpin user-63=ladburyp user-64=stagingerris user-65=dancinggardener user-66=nvihkvu user-67=sketchy user-68=cath user-69=havantho user-70=what user-71=oubpgvbx user-72=tstardom user-73=ulsukarm user-74=maflemin user-75=lbscrmod user-76=athenare user-77=connect9 user-78=vantagep user-79=booff user-80=markward user-81=foundation user-82=leereyn1 user-83=stephani user-84=still user-85=agproduc user-86=hodgesonweb user-87=theblack user-88=spectrum user-89=jarvisin user-90=musorguk user-91=megacards user-92=wilsonsw user-93=sarafoundation user-94=atestord user-95=strathar user-96=lakesan1 user-97=brmrjxl user-98=magichat user-99=lbhyisi user-100=hhdugcor user-101=ptkxhsbt user-102=dickemery123
Sep 26 03:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=martsblo user-104=southlon user-105=highlegh user-106=firstred user-107=costestimatorco user-108=firstrel user-109=clarkass user-110=coursemc user-111=opaiscyx user-112=firstres user-113=jonhartl user-114=seftvta user-115=ultbcrra user-116=thqkgnbz user-117=connectedshoppin user-118=ianrayne user-119=accooper user-120=carsinyo user-121=fetch user-122=hubmaster user-123=elecleis user-124=milloyco user-125=gilpin user-126=bemadonn user-127=belle user-128=ggaaorgu user-129=newstoda user-130=bedfords user-131=battlere user-132=oneoarco user-133=firstre2 user-134=vivienn1 user-135=brighto1 user-136=nstriton user-137=nativene user-138=stuartge user-139=askhform user-140=innovat1 user-141=skyfirec user-142=alexadmin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 03:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 03:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:57 nativespace-cdp sudo[20895]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:57 nativespace-cdp sudo[20904]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zsqwenBRn5O2zosr.~
Sep 26 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:57 nativespace-cdp sudo[20907]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zsqwenBRn5O2zosr.~'
Sep 26 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:57 nativespace-cdp sudo[20910]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zsqwenBRn5O2zosr.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:57 nativespace-cdp sudo[20914]: pam_unix(sudo:session): session closed for user root
Sep 26 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:09:57 nativespace-cdp sudo[20917]: pam_unix(sudo:session): session closed for user root
Sep 26 03:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 03:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 03:10:03 nativespace-cdp sudo[21061]: pam_unix(sudo:session): session closed for user root
Sep 26 03:11:36 nativespace-cdp sshd[21506]: Connection closed by 159.100.136.21 port 53630 [preauth]
Sep 26 03:16:36 nativespace-cdp sshd[22772]: Connection closed by 159.100.136.21 port 34942 [preauth]
Sep 26 03:21:33 nativespace-cdp sshd[24151]: Connection closed by 159.100.136.21 port 44152 [preauth]
Sep 26 03:26:33 nativespace-cdp sshd[25320]: Connection closed by 159.100.136.21 port 53282 [preauth]
Sep 26 03:31:33 nativespace-cdp sshd[26983]: Connection closed by 159.100.136.21 port 34118 [preauth]
Sep 26 03:36:33 nativespace-cdp sshd[28294]: Connection closed by 159.100.136.21 port 43468 [preauth]
Sep 26 03:41:35 nativespace-cdp sshd[29650]: Connection closed by 159.100.136.21 port 53022 [preauth]
Sep 26 03:46:33 nativespace-cdp sshd[31127]: Connection closed by 159.100.136.21 port 34072 [preauth]
Sep 26 03:51:33 nativespace-cdp sshd[32267]: Connection closed by 159.100.136.21 port 42962 [preauth]
Sep 26 03:56:33 nativespace-cdp sshd[921]: Connection closed by 159.100.136.21 port 52240 [preauth]
Sep 26 04:01:35 nativespace-cdp sshd[3246]: Connection closed by 159.100.136.21 port 33452 [preauth]
Sep 26 04:06:34 nativespace-cdp sshd[4237]: Connection closed by 159.100.136.21 port 41666 [preauth]
Sep 26 04:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 04:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:09:57 nativespace-cdp sudo[4774]: pam_unix(sudo:session): session closed for user root
Sep 26 04:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 04:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:09:57 nativespace-cdp sudo[4778]: pam_unix(sudo:session): session closed for user root
Sep 26 04:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 04:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:09:57 nativespace-cdp sudo[4781]: pam_unix(sudo:session): session closed for user root
Sep 26 04:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 04:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:09:57 nativespace-cdp sudo[4786]: pam_unix(sudo:session): session closed for user root
Sep 26 04:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 04:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:00 nativespace-cdp sudo[4789]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 04:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:01 nativespace-cdp sudo[4804]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 04:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:01 nativespace-cdp sudo[4807]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 04:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:01 nativespace-cdp sudo[4810]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 04:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:01 nativespace-cdp sudo[4813]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 04:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:01 nativespace-cdp sudo[4816]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 04:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:01 nativespace-cdp sudo[4819]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 04:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:10 nativespace-cdp sudo[5023]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 04:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:12 nativespace-cdp sudo[5029]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=romaldki user-2=outdoorc user-3=hodgsonmail user-4=ranxterc user-5=branko user-6=onlycont user-7=attlebor user-8=lucy user-9=nbhavers user-10=careers user-11=david user-12=chrisdal user-13=mcdermos user-14=jennimil user-15=tomandle user-16=design user-17=ladburyp user-18=stagingerris user-19=dancinggardener user-20=kategilpin user-21=sketchy user-22=cath user-23=havantho user-24=nvihkvu user-25=tstardom user-26=oubpgvbx user-27=what user-28=bakery user-29=sosevalu user-30=crrtipdl user-31=boldover user-32=nove user-33=dhyana user-34=beauty user-35=eatspam user-36=darkstar user-37=nsceres user-38=burydropin user-39=fawcettd user-40=steve user-41=bwppodcast user-42=zebrapho user-43=sibtoncc user-44=asandcoc user-45=eugincou user-46=courseme user-47=hirefootballgame user-48=pugwash user-49=paulmca1
Sep 26 04:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=howardon user-51=cwsocial user-52=cambria1 user-53=cathski user-54=ninejimm user-55=reliable user-56=hidden user-57=nomistakes user-58=tigerlet user-59=barbersh user-60=isleofwi user-61=smrszyqg user-62=lkpier user-63=philmcph user-64=ctedorgu user-65=steakbridieme user-66=firstre5 user-67=donnychicago user-68=nscdp user-69=health2045 user-70=fortunaz user-71=foods user-72=leftie user-73=connectedshoppin user-74=thqkgnbz user-75=accooper user-76=ianrayne user-77=hubmaster user-78=carsinyo user-79=fetch user-80=gilpin user-81=milloyco user-82=elecleis user-83=firstred user-84=southlon user-85=highlegh user-86=firstrel user-87=clarkass user-88=costestimatorco user-89=opaiscyx user-90=coursemc user-91=jonhartl user-92=seftvta user-93=ultbcrra user-94=firstres user-95=nativene user-96=innovat1 user-97=stuartge user-98=askhform user-99=skyfirec user-100=alexadmin user-101=belle user-102=ggaaorgu
Sep 26 04:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=newstoda user-104=bemadonn user-105=bedfords user-106=firstre2 user-107=vivienn1 user-108=battlere user-109=oneoarco user-110=brighto1 user-111=nstriton user-112=stephani user-113=leereyn1 user-114=still user-115=agproduc user-116=spectrum user-117=hodgesonweb user-118=theblack user-119=jarvisin user-120=ulsukarm user-121=connect9 user-122=athenare user-123=vantagep user-124=maflemin user-125=lbscrmod user-126=markward user-127=booff user-128=foundation user-129=magichat user-130=lbhyisi user-131=hhdugcor user-132=dickemery123 user-133=ptkxhsbt user-134=martsblo user-135=musorguk user-136=megacards user-137=wilsonsw user-138=strathar user-139=sarafoundation user-140=atestord user-141=brmrjxl user-142=lakesan1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 04:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 04:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:13 nativespace-cdp sudo[5036]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 04:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:14 nativespace-cdp sudo[5049]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YqXbgVitzODKMF1R.~
Sep 26 04:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:14 nativespace-cdp sudo[5053]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YqXbgVitzODKMF1R.~'
Sep 26 04:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:14 nativespace-cdp sudo[5056]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YqXbgVitzODKMF1R.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 04:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:14 nativespace-cdp sudo[5060]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 04:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:14 nativespace-cdp sudo[5063]: pam_unix(sudo:session): session closed for user root
Sep 26 04:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 04:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:10:31 nativespace-cdp sudo[5158]: pam_unix(sudo:session): session closed for user root
Sep 26 04:11:37 nativespace-cdp sshd[5500]: Connection closed by 159.100.136.21 port 50686 [preauth]
Sep 26 04:16:33 nativespace-cdp sshd[6928]: Connection closed by 159.100.136.21 port 60438 [preauth]
Sep 26 04:21:33 nativespace-cdp sshd[8109]: Connection closed by 159.100.136.21 port 41032 [preauth]
Sep 26 04:26:33 nativespace-cdp sshd[9174]: Connection closed by 159.100.136.21 port 50542 [preauth]
Sep 26 04:31:33 nativespace-cdp sshd[10401]: Connection closed by 159.100.136.21 port 60310 [preauth]
Sep 26 04:36:33 nativespace-cdp sshd[11680]: Connection closed by 159.100.136.21 port 41676 [preauth]
Sep 26 04:41:33 nativespace-cdp sshd[14531]: Connection closed by 159.100.136.21 port 51252 [preauth]
Sep 26 04:46:36 nativespace-cdp sshd[16233]: Connection closed by 159.100.136.21 port 59048 [preauth]
Sep 26 04:51:33 nativespace-cdp sshd[17370]: Connection closed by 159.100.136.21 port 40392 [preauth]
Sep 26 04:56:33 nativespace-cdp sshd[18498]: Connection closed by 159.100.136.21 port 48066 [preauth]
Sep 26 04:56:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 04:56:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:56:56 nativespace-cdp sudo[18564]: pam_unix(sudo:session): session closed for user root
Sep 26 04:56:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 04:56:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:56:56 nativespace-cdp sudo[18576]: pam_unix(sudo:session): session closed for user root
Sep 26 04:56:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 04:56:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:00 nativespace-cdp sudo[18588]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=athenare user-2=connect9 user-3=vantagep user-4=maflemin user-5=lbscrmod user-6=foundation user-7=booff user-8=markward user-9=ulsukarm user-10=spectrum user-11=hodgesonweb user-12=theblack user-13=jarvisin user-14=stephani user-15=leereyn1 user-16=still user-17=agproduc user-18=strathar user-19=sarafoundation user-20=atestord user-21=brmrjxl user-22=lakesan1 user-23=musorguk user-24=megacards user-25=wilsonsw user-26=dickemery123 user-27=ptkxhsbt user-28=martsblo user-29=magichat user-30=lbhyisi user-31=hhdugcor user-32=coursemc user-33=opaiscyx user-34=seftvta user-35=jonhartl user-36=ultbcrra user-37=firstres user-38=firstred user-39=southlon user-40=highlegh user-41=firstrel user-42=clarkass user-43=costestimatorco user-44=hubmaster user-45=carsinyo user-46=fetch user-47=milloyco
Sep 26 04:57:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=gilpin user-49=elecleis user-50=connectedshoppin user-51=thqkgnbz user-52=accooper user-53=ianrayne user-54=firstre2 user-55=vivienn1 user-56=battlere user-57=oneoarco user-58=brighto1 user-59=nstriton user-60=ggaaorgu user-61=belle user-62=newstoda user-63=bemadonn user-64=bedfords user-65=alexadmin user-66=skyfirec user-67=nativene user-68=innovat1 user-69=stuartge user-70=askhform user-71=asandcoc user-72=sibtoncc user-73=steve user-74=bwppodcast user-75=zebrapho user-76=nsceres user-77=burydropin user-78=fawcettd user-79=dhyana user-80=beauty user-81=eatspam user-82=darkstar user-83=lkpier user-84=philmcph user-85=ctedorgu user-86=donnychicago user-87=steakbridieme user-88=firstre5 user-89=nscdp user-90=health2045 user-91=fortunaz user-92=leftie user-93=foods user-94=hidden user-95=nomistakes user-96=barbersh user-97=tigerlet user-98=isleofwi user-99=smrszyqg user-100=pugwash user-101=howardon
Sep 26 04:57:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=paulmca1 user-103=cwsocial user-104=cambria1 user-105=cathski user-106=reliable user-107=ninejimm user-108=eugincou user-109=courseme user-110=hirefootballgame user-111=jennimil user-112=tomandle user-113=careers user-114=nbhavers user-115=david user-116=chrisdal user-117=mcdermos user-118=onlycont user-119=attlebor user-120=lucy user-121=romaldki user-122=hodgsonmail user-123=ranxterc user-124=outdoorc user-125=branko user-126=boldover user-127=nove user-128=bakery user-129=sosevalu user-130=crrtipdl user-131=sketchy user-132=cath user-133=havantho user-134=nvihkvu user-135=oubpgvbx user-136=tstardom user-137=what user-138=design user-139=ladburyp user-140=stagingerris user-141=dancinggardener user-142=kategilpin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 26 04:57:00 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 04:57:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:01 nativespace-cdp sudo[18594]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 26 04:57:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:03 nativespace-cdp sudo[18623]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 26 04:57:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:03 nativespace-cdp sudo[18635]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 26 04:57:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 04:57:29 nativespace-cdp sudo[18815]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 04:57:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 26 04:57:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:30 nativespace-cdp sudo[18821]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 26 04:57:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:32 nativespace-cdp sudo[18827]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 26 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:35 nativespace-cdp sudo[18836]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 26 04:57:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:35 nativespace-cdp sudo[18844]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 26 04:57:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:37 nativespace-cdp sudo[18857]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 26 04:57:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:41 nativespace-cdp sudo[18866]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 26 04:57:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:42 nativespace-cdp sudo[18883]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 26 04:57:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:42 nativespace-cdp sudo[18891]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 26 04:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:57:46 nativespace-cdp sudo[18954]: pam_unix(sudo:session): session closed for user root
Sep 26 04:57:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 26 04:57:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 04:57:49 nativespace-cdp sudo[19015]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 04:57:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 26 04:57:50 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 26 04:57:50 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 26 04:57:50 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:57:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 04:57:50 nativespace-cdp sudo[19021]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 04:57:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 26 04:57:50 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 26 04:57:50 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 26 04:57:50 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:57:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 04:57:51 nativespace-cdp sudo[19027]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 04:57:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 26 04:57:51 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 26 04:57:51 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 26 04:57:51 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:57:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 04:57:53 nativespace-cdp sudo[19037]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 26 04:58:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 04:58:03 nativespace-cdp sudo[19184]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:58:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 04:58:03 nativespace-cdp sudo[19190]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:58:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 04:58:03 nativespace-cdp sudo[19196]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 26 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:58:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 04:58:03 nativespace-cdp sudo[19202]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 04:58:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 26 04:58:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:58:06 nativespace-cdp sudo[19245]: pam_unix(sudo:session): session closed for user root
Sep 26 04:58:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 26 04:58:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:58:06 nativespace-cdp sudo[19254]: pam_unix(sudo:session): session closed for user root
Sep 26 04:58:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 26 04:58:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 04:58:28 nativespace-cdp sudo[19353]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 04:58:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 26 04:58:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:58:28 nativespace-cdp sudo[19361]: pam_unix(sudo:session): session closed for user root
Sep 26 04:58:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 26 04:58:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:58:29 nativespace-cdp sudo[19365]: pam_unix(sudo:session): session closed for user root
Sep 26 04:58:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 26 04:58:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:58:30 nativespace-cdp sudo[19370]: pam_unix(sudo:session): session closed for user root
Sep 26 04:58:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 26 04:58:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:58:30 nativespace-cdp sudo[19379]: pam_unix(sudo:session): session closed for user root
Sep 26 04:58:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 26 04:58:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:58:33 nativespace-cdp sudo[19398]: pam_unix(sudo:session): session closed for user root
Sep 26 04:58:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 26 04:58:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:58:34 nativespace-cdp sudo[19403]: pam_unix(sudo:session): session closed for user root
Sep 26 04:58:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 26 04:58:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:58:42 nativespace-cdp sudo[19484]: pam_unix(sudo:session): session closed for user root
Sep 26 04:58:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 26 04:58:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 04:58:45 nativespace-cdp sudo[19545]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 04:58:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 26 04:58:45 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 26 04:58:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 26 04:58:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:58:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 04:58:45 nativespace-cdp sudo[19552]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 04:58:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 26 04:58:45 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 26 04:58:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 26 04:58:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:58:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 04:59:03 nativespace-cdp sudo[19560]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 04:59:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 26 04:59:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 04:59:11 nativespace-cdp sudo[19800]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 04:59:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 26 04:59:11 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 26 04:59:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 26 04:59:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:59:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 04:59:11 nativespace-cdp sudo[19806]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 04:59:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 26 04:59:11 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 26 04:59:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 26 04:59:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:59:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 04:59:12 nativespace-cdp sudo[19812]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 04:59:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 26 04:59:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:59:14 nativespace-cdp sudo[19854]: pam_unix(sudo:session): session closed for user root
Sep 26 04:59:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 26 04:59:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:59:14 nativespace-cdp sudo[19861]: pam_unix(sudo:session): session closed for user root
Sep 26 04:59:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 26 04:59:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 04:59:33 nativespace-cdp sudo[19958]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 04:59:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 26 04:59:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:59:33 nativespace-cdp sudo[19965]: pam_unix(sudo:session): session closed for user root
Sep 26 04:59:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 26 04:59:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:59:34 nativespace-cdp sudo[19969]: pam_unix(sudo:session): session closed for user root
Sep 26 04:59:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 26 04:59:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:59:34 nativespace-cdp sudo[19974]: pam_unix(sudo:session): session closed for user root
Sep 26 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 26 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:59:35 nativespace-cdp sudo[19987]: pam_unix(sudo:session): session closed for user root
Sep 26 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 26 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:59:35 nativespace-cdp sudo[19995]: pam_unix(sudo:session): session closed for user root
Sep 26 04:59:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 26 04:59:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 04:59:46 nativespace-cdp sudo[20081]: pam_unix(sudo:session): session closed for user root
Sep 26 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 26 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 04:59:49 nativespace-cdp sudo[20144]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 26 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 26 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 26 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 04:59:49 nativespace-cdp sudo[20150]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 26 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 26 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 26 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 05:00:02 nativespace-cdp sudo[20157]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 05:00:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 26 05:00:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 26 05:00:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 26 05:00:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 05:00:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 05:00:05 nativespace-cdp sudo[20291]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 26 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 05:00:12 nativespace-cdp sudo[20479]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 05:00:12 nativespace-cdp sudo[20485]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 05:00:12 nativespace-cdp sudo[20491]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 26 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 05:00:12 nativespace-cdp sudo[20497]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 05:00:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 26 05:00:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:15 nativespace-cdp sudo[20534]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 26 05:00:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:15 nativespace-cdp sudo[20540]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 26 05:00:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:18 nativespace-cdp sudo[20563]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 26 05:00:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:18 nativespace-cdp sudo[20573]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 26 05:00:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 26 05:00:19 nativespace-cdp sudo[20585]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 26 05:00:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 26 05:00:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:20 nativespace-cdp sudo[20592]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 26 05:00:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:20 nativespace-cdp sudo[20598]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 26 05:00:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:20 nativespace-cdp sudo[20602]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 26 05:00:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 05:00:37 nativespace-cdp sudo[20734]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 05:00:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 26 05:00:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:38 nativespace-cdp sudo[20740]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 26 05:00:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:38 nativespace-cdp sudo[20748]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 26 05:00:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:39 nativespace-cdp sudo[20760]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 26 05:00:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:00:45 nativespace-cdp sudo[20828]: pam_unix(sudo:session): session closed for user root
Sep 26 05:00:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 26 05:00:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 05:00:48 nativespace-cdp sudo[20887]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 05:00:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 26 05:00:48 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 26 05:00:48 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 26 05:00:48 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 05:00:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 05:00:49 nativespace-cdp sudo[20893]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 05:00:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 26 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 26 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 26 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 05:00:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 05:01:06 nativespace-cdp sudo[20904]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 05:01:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 26 05:01:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 05:01:13 nativespace-cdp sudo[21173]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 05:01:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 26 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 26 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 26 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 05:01:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 05:01:13 nativespace-cdp sudo[21179]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 05:01:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 26 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 26 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 26 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 26 05:01:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 05:01:13 nativespace-cdp sudo[21185]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 05:01:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 26 05:01:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:01:16 nativespace-cdp sudo[21219]: pam_unix(sudo:session): session closed for user root
Sep 26 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 26 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:01:16 nativespace-cdp sudo[21230]: pam_unix(sudo:session): session closed for user root
Sep 26 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 26 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 26 05:01:31 nativespace-cdp sudo[21392]: pam_unix(sudo:session): session closed for user fortunaz
Sep 26 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 26 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:01:31 nativespace-cdp sudo[21398]: pam_unix(sudo:session): session closed for user root
Sep 26 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 26 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:01:32 nativespace-cdp sudo[21403]: pam_unix(sudo:session): session closed for user root
Sep 26 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 26 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:01:32 nativespace-cdp sudo[21407]: pam_unix(sudo:session): session closed for user root
Sep 26 05:01:33 nativespace-cdp sshd[21421]: Connection closed by 159.100.136.21 port 57586 [preauth]
Sep 26 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 26 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:01:35 nativespace-cdp sudo[21425]: pam_unix(sudo:session): session closed for user root
Sep 26 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 26 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:01:35 nativespace-cdp sudo[21431]: pam_unix(sudo:session): session closed for user root
Sep 26 05:01:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 26 05:01:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:01:40 nativespace-cdp sudo[21497]: pam_unix(sudo:session): session closed for user root
Sep 26 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=athenare WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "Advanced Form Integration" on ONE | OAR (https://oneoar.co.uk). Installed version: 1.64.0. Available version: 1.91.0.<br/><br/>2. Plugin "UpdraftPlus - Backup/Restore" on ONE | OAR (https://oneoar.co.uk). Installed version: 1.23.13. Available version: 1.24.5.<br/><br/>3. Plugin "WooCommerce" on ONE | OAR (https://oneoar.co.uk). Installed version: 8.0.2. Available version: 9.3.3.<br/><br/>4. Plugin "Yoast SEO" on ONE | OAR (https://oneoar.co.uk). Installed version: 19.9. Available version: 23.5.<br/><br/>5. Plugin "Kadence Blocks – Gutenberg Blocks for Page Builder Features" on Limekilns Heritage Trust (https://limekilnspier.org.uk).
Sep 26 05:01:51 nativespace-cdp sudo: wp-toolkit : (command continued) Installed version: 3.2.23. Available version: 3.2.54.<br/><br/>' installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 26 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:01:51 nativespace-cdp sudo[21681]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 26 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:04 nativespace-cdp sudo[21838]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21841]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21844]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21847]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21850]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21853]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21856]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21859]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21864]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21867]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21870]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21873]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21877]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21880]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21883]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21886]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21889]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21892]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21896]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21899]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:05 nativespace-cdp sudo[21902]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21905]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21908]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21911]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21914]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21917]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21920]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21923]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21926]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21929]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21932]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21935]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21938]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21941]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21944]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21948]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21951]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21954]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21957]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21960]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21963]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21966]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:06 nativespace-cdp sudo[21969]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[21972]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[21975]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[21978]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[21981]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[21984]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[21987]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[21990]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[21993]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[21996]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22000]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22003]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22006]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22009]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22012]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22015]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22018]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22021]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22024]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22027]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22031]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22034]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22037]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22040]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22043]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22047]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22050]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22053]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:07 nativespace-cdp sudo[22056]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22059]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22062]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22065]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22068]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22071]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22074]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22077]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22080]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22083]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22086]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22089]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22092]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22095]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22098]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22102]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22105]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22108]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22111]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22114]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22118]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22121]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22124]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22127]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22130]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:08 nativespace-cdp sudo[22133]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22136]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22139]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22142]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22145]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22148]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22151]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22154]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22157]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22160]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22163]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22166]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22169]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22172]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22175]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22178]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22181]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22184]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22187]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22190]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22193]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22196]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22200]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22203]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22206]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22210]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22213]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22216]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22219]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22222]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:09 nativespace-cdp sudo[22225]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22228]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22231]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22234]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22237]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22240]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22243]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22246]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22249]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22252]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22255]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22258]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22261]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22264]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22267]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22270]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22273]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22277]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22280]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22283]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22286]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22289]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22292]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22295]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22298]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22302]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22305]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22307]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22311]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22314]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22317]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22320]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22323]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:10 nativespace-cdp sudo[22326]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22329]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22332]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22335]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22338]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22341]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22344]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22347]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22350]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22353]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22356]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22359]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22362]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22365]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22368]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22371]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22374]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22377]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22380]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22383]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22386]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22390]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22395]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22398]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22401]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22404]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22407]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22410]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 26 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:11 nativespace-cdp sudo[22413]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22416]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22419]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22422]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22425]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22428]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22431]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22434]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22437]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22440]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22443]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22446]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22449]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22452]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22455]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22458]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22461]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22464]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22467]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22470]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22473]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22476]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22479]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22482]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22486]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22489]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22492]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22495]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22498]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22502]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22505]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:12 nativespace-cdp sudo[22508]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 26 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:13 nativespace-cdp sudo[22511]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 26 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:13 nativespace-cdp sudo[22514]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 26 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:13 nativespace-cdp sudo[22517]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 26 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:13 nativespace-cdp sudo[22520]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 26 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:13 nativespace-cdp sudo[22523]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 26 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:13 nativespace-cdp sudo[22526]: pam_unix(sudo:session): session closed for user root
Sep 26 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 26 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:02:13 nativespace-cdp sudo[22529]: pam_unix(sudo:session): session closed for user root
Sep 26 05:06:33 nativespace-cdp sshd[23630]: Connection closed by 159.100.136.21 port 38450 [preauth]
Sep 26 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:55 nativespace-cdp sudo[24194]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:55 nativespace-cdp sudo[24197]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:55 nativespace-cdp sudo[24200]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:55 nativespace-cdp sudo[24209]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:58 nativespace-cdp sudo[24212]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 05:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:58 nativespace-cdp sudo[24225]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 05:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:58 nativespace-cdp sudo[24229]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 05:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:58 nativespace-cdp sudo[24232]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 05:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:58 nativespace-cdp sudo[24235]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 05:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:58 nativespace-cdp sudo[24238]: pam_unix(sudo:session): session closed for user root
Sep 26 05:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 05:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:09:58 nativespace-cdp sudo[24241]: pam_unix(sudo:session): session closed for user root
Sep 26 05:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 05:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:10:07 nativespace-cdp sudo[24374]: pam_unix(sudo:session): session closed for user root
Sep 26 05:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 05:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:10:08 nativespace-cdp sudo[24380]: pam_unix(sudo:session): session closed for user root
Sep 26 05:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=thqkgnbz user-2=connectedshoppin user-3=ianrayne user-4=accooper user-5=carsinyo user-6=fetch user-7=hubmaster user-8=elecleis user-9=milloyco user-10=gilpin user-11=southlon user-12=highlegh user-13=firstred user-14=costestimatorco user-15=clarkass user-16=firstrel user-17=coursemc user-18=opaiscyx user-19=firstres user-20=seftvta user-21=jonhartl user-22=ultbcrra user-23=nativene user-24=askhform user-25=stuartge user-26=innovat1 user-27=skyfirec user-28=alexadmin user-29=bemadonn user-30=ggaaorgu user-31=belle user-32=newstoda user-33=bedfords user-34=battlere user-35=oneoarco user-36=firstre2 user-37=vivienn1 user-38=brighto1 user-39=nstriton user-40=leereyn1 user-41=stephani user-42=still user-43=agproduc user-44=theblack user-45=hodgesonweb user-46=spectrum user-47=jarvisin
Sep 26 05:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=maflemin user-50=lbscrmod user-51=athenare user-52=connect9 user-53=vantagep user-54=booff user-55=markward user-56=foundation user-57=magichat user-58=lbhyisi user-59=hhdugcor user-60=ptkxhsbt user-61=dickemery123 user-62=martsblo user-63=musorguk user-64=megacards user-65=wilsonsw user-66=sarafoundation user-67=atestord user-68=strathar user-69=lakesan1 user-70=brmrjxl user-71=romaldki user-72=branko user-73=hodgsonmail user-74=ranxterc user-75=outdoorc user-76=onlycont user-77=attlebor user-78=lucy user-79=careers user-80=nbhavers user-81=david user-82=mcdermos user-83=chrisdal user-84=jennimil user-85=tomandle user-86=design user-87=kategilpin user-88=ladburyp user-89=dancinggardener user-90=stagingerris user-91=nvihkvu user-92=cath user-93=sketchy user-94=havantho user-95=what user-96=tstardom user-97=oubpgvbx user-98=sosevalu user-99=crrtipdl user-100=bakery user-101=boldover
Sep 26 05:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=nove user-103=dhyana user-104=eatspam user-105=darkstar user-106=beauty user-107=nsceres user-108=burydropin user-109=fawcettd user-110=steve user-111=zebrapho user-112=bwppodcast user-113=sibtoncc user-114=asandcoc user-115=courseme user-116=eugincou user-117=hirefootballgame user-118=howardon user-119=pugwash user-120=paulmca1 user-121=cwsocial user-122=reliable user-123=ninejimm user-124=cambria1 user-125=cathski user-126=tigerlet user-127=barbersh user-128=hidden user-129=nomistakes user-130=smrszyqg user-131=isleofwi user-132=philmcph user-133=ctedorgu user-134=firstre5 user-135=donnychicago user-136=steakbridieme user-137=lkpier user-138=health2045 user-139=fortunaz user-140=leftie user-141=foods user-142=nscdp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 26 05:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 05:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:10:09 nativespace-cdp sudo[24394]: pam_unix(sudo:session): session closed for user root
Sep 26 05:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 05:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:10:09 nativespace-cdp sudo[24412]: pam_unix(sudo:session): session closed for user root
Sep 26 05:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2VbWf7gmB7YHrk6l.~
Sep 26 05:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:10:09 nativespace-cdp sudo[24415]: pam_unix(sudo:session): session closed for user root
Sep 26 05:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2VbWf7gmB7YHrk6l.~'
Sep 26 05:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:10:09 nativespace-cdp sudo[24418]: pam_unix(sudo:session): session closed for user root
Sep 26 05:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2VbWf7gmB7YHrk6l.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 05:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:10:09 nativespace-cdp sudo[24422]: pam_unix(sudo:session): session closed for user root
Sep 26 05:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 05:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:10:09 nativespace-cdp sudo[24425]: pam_unix(sudo:session): session closed for user root
Sep 26 05:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 05:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 05:10:24 nativespace-cdp sudo[24495]: pam_unix(sudo:session): session closed for user root
Sep 26 05:11:33 nativespace-cdp sshd[24867]: Connection closed by 159.100.136.21 port 47844 [preauth]
Sep 26 05:16:35 nativespace-cdp sshd[26316]: Connection closed by 159.100.136.21 port 56914 [preauth]
Sep 26 05:21:33 nativespace-cdp sshd[27466]: Connection closed by 159.100.136.21 port 38244 [preauth]
Sep 26 05:26:35 nativespace-cdp sshd[29099]: Connection closed by 159.100.136.21 port 48058 [preauth]
Sep 26 05:31:34 nativespace-cdp sshd[30490]: Connection closed by 159.100.136.21 port 57810 [preauth]
Sep 26 05:35:10 nativespace-cdp su: pam_unix(su:session): session opened for user courseme by (uid=0)
Sep 26 05:35:11 nativespace-cdp su[31357]: pam_unix(su:session): session closed for user courseme
Sep 26 05:36:34 nativespace-cdp sshd[31769]: Connection closed by 159.100.136.21 port 39576 [preauth]
Sep 26 05:41:33 nativespace-cdp sshd[385]: Connection closed by 159.100.136.21 port 49196 [preauth]
Sep 26 05:46:36 nativespace-cdp sshd[2092]: Connection closed by 159.100.136.21 port 59172 [preauth]
Sep 26 05:51:33 nativespace-cdp sshd[3276]: Connection closed by 159.100.136.21 port 40306 [preauth]
Sep 26 05:56:34 nativespace-cdp sshd[4368]: Connection closed by 159.100.136.21 port 50208 [preauth]
Sep 26 06:01:33 nativespace-cdp sshd[5911]: Connection closed by 159.100.136.21 port 59784 [preauth]
Sep 26 06:06:33 nativespace-cdp sshd[7056]: Connection closed by 159.100.136.21 port 41452 [preauth]
Sep 26 06:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 06:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:09:58 nativespace-cdp sudo[7729]: pam_unix(sudo:session): session closed for user root
Sep 26 06:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 06:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:09:58 nativespace-cdp sudo[7733]: pam_unix(sudo:session): session closed for user root
Sep 26 06:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 06:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:00 nativespace-cdp sudo[7737]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 06:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:00 nativespace-cdp sudo[7746]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 06:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:06 nativespace-cdp sudo[7749]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 06:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:06 nativespace-cdp sudo[7893]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 06:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:06 nativespace-cdp sudo[7896]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 06:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:06 nativespace-cdp sudo[7899]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 06:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:06 nativespace-cdp sudo[7902]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 06:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:06 nativespace-cdp sudo[7905]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 06:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:06 nativespace-cdp sudo[7908]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 06:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:15 nativespace-cdp sudo[7935]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 06:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:16 nativespace-cdp sudo[7941]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=thqkgnbz user-2=connectedshoppin user-3=ianrayne user-4=accooper user-5=carsinyo user-6=fetch user-7=hubmaster user-8=elecleis user-9=milloyco user-10=gilpin user-11=southlon user-12=highlegh user-13=firstred user-14=costestimatorco user-15=clarkass user-16=firstrel user-17=coursemc user-18=opaiscyx user-19=firstres user-20=seftvta user-21=jonhartl user-22=ultbcrra user-23=nativene user-24=askhform user-25=stuartge user-26=innovat1 user-27=alexadmin user-28=skyfirec user-29=bemadonn user-30=belle user-31=ggaaorgu user-32=newstoda user-33=bedfords user-34=battlere user-35=oneoarco user-36=firstre2 user-37=vivienn1 user-38=brighto1 user-39=nstriton user-40=leereyn1 user-41=stephani user-42=still user-43=agproduc user-44=theblack user-45=hodgesonweb user-46=spectrum user-47=jarvisin
Sep 26 06:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=maflemin user-50=lbscrmod user-51=athenare user-52=connect9 user-53=vantagep user-54=booff user-55=foundation user-56=markward user-57=magichat user-58=lbhyisi user-59=hhdugcor user-60=ptkxhsbt user-61=dickemery123 user-62=martsblo user-63=musorguk user-64=megacards user-65=wilsonsw user-66=sarafoundation user-67=atestord user-68=strathar user-69=lakesan1 user-70=brmrjxl user-71=romaldki user-72=branko user-73=ranxterc user-74=outdoorc user-75=hodgsonmail user-76=onlycont user-77=attlebor user-78=lucy user-79=nbhavers user-80=careers user-81=david user-82=mcdermos user-83=chrisdal user-84=jennimil user-85=tomandle user-86=design user-87=kategilpin user-88=ladburyp user-89=stagingerris user-90=dancinggardener user-91=nvihkvu user-92=cath user-93=sketchy user-94=havantho user-95=what user-96=oubpgvbx user-97=tstardom user-98=sosevalu user-99=crrtipdl user-100=bakery user-101=boldover
Sep 26 06:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=nove user-103=dhyana user-104=eatspam user-105=darkstar user-106=beauty user-107=nsceres user-108=burydropin user-109=fawcettd user-110=steve user-111=zebrapho user-112=bwppodcast user-113=asandcoc user-114=sibtoncc user-115=courseme user-116=eugincou user-117=hirefootballgame user-118=howardon user-119=pugwash user-120=paulmca1 user-121=cwsocial user-122=reliable user-123=ninejimm user-124=cambria1 user-125=cathski user-126=tigerlet user-127=barbersh user-128=hidden user-129=nomistakes user-130=smrszyqg user-131=isleofwi user-132=philmcph user-133=ctedorgu user-134=donnychicago user-135=firstre5 user-136=steakbridieme user-137=lkpier user-138=fortunaz user-139=health2045 user-140=leftie user-141=foods user-142=nscdp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 26 06:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 06:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:17 nativespace-cdp sudo[7947]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:18 nativespace-cdp sudo[7958]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cS9wfHJlRSitohrO.~
Sep 26 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:18 nativespace-cdp sudo[7962]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cS9wfHJlRSitohrO.~'
Sep 26 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:18 nativespace-cdp sudo[7965]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cS9wfHJlRSitohrO.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:18 nativespace-cdp sudo[7969]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:18 nativespace-cdp sudo[7972]: pam_unix(sudo:session): session closed for user root
Sep 26 06:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 06:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 06:10:19 nativespace-cdp sudo[7991]: pam_unix(sudo:session): session closed for user root
Sep 26 06:11:33 nativespace-cdp sshd[8234]: Connection closed by 159.100.136.21 port 50898 [preauth]
Sep 26 06:16:33 nativespace-cdp sshd[9779]: Connection closed by 159.100.136.21 port 60862 [preauth]
Sep 26 06:21:35 nativespace-cdp sshd[10942]: Connection closed by 159.100.136.21 port 42112 [preauth]
Sep 26 06:26:34 nativespace-cdp sshd[12000]: Connection closed by 159.100.136.21 port 51938 [preauth]
Sep 26 06:28:32 nativespace-cdp sshd[12407]: Invalid user ubuntu from 141.94.223.12 port 45034
Sep 26 06:28:32 nativespace-cdp sshd[12407]: input_userauth_request: invalid user ubuntu [preauth]
Sep 26 06:28:32 nativespace-cdp sshd[12407]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 06:28:32 nativespace-cdp sshd[12407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.223.12
Sep 26 06:28:34 nativespace-cdp sshd[12407]: Failed password for invalid user ubuntu from 141.94.223.12 port 45034 ssh2
Sep 26 06:28:34 nativespace-cdp sshd[12407]: Received disconnect from 141.94.223.12 port 45034:11: Bye Bye [preauth]
Sep 26 06:28:34 nativespace-cdp sshd[12407]: Disconnected from 141.94.223.12 port 45034 [preauth]
Sep 26 06:30:48 nativespace-cdp sshd[13376]: Invalid user svn from 47.243.33.176 port 55842
Sep 26 06:30:48 nativespace-cdp sshd[13376]: input_userauth_request: invalid user svn [preauth]
Sep 26 06:30:48 nativespace-cdp sshd[13376]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 06:30:48 nativespace-cdp sshd[13376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.243.33.176
Sep 26 06:30:50 nativespace-cdp sshd[13376]: Failed password for invalid user svn from 47.243.33.176 port 55842 ssh2
Sep 26 06:30:50 nativespace-cdp sshd[13376]: Received disconnect from 47.243.33.176 port 55842:11: Bye Bye [preauth]
Sep 26 06:30:50 nativespace-cdp sshd[13376]: Disconnected from 47.243.33.176 port 55842 [preauth]
Sep 26 06:31:35 nativespace-cdp sshd[13521]: Connection closed by 159.100.136.21 port 33140 [preauth]
Sep 26 06:33:26 nativespace-cdp sshd[13878]: Invalid user ubuntu from 141.94.223.12 port 44154
Sep 26 06:33:26 nativespace-cdp sshd[13878]: input_userauth_request: invalid user ubuntu [preauth]
Sep 26 06:33:26 nativespace-cdp sshd[13878]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 06:33:26 nativespace-cdp sshd[13878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.223.12
Sep 26 06:33:28 nativespace-cdp sshd[13878]: Failed password for invalid user ubuntu from 141.94.223.12 port 44154 ssh2
Sep 26 06:33:31 nativespace-cdp sshd[13878]: Received disconnect from 141.94.223.12 port 44154:11: Bye Bye [preauth]
Sep 26 06:33:31 nativespace-cdp sshd[13878]: Disconnected from 141.94.223.12 port 44154 [preauth]
Sep 26 06:34:05 nativespace-cdp sshd[13975]: Invalid user usuario from 141.94.223.12 port 59782
Sep 26 06:34:05 nativespace-cdp sshd[13975]: input_userauth_request: invalid user usuario [preauth]
Sep 26 06:34:05 nativespace-cdp sshd[13975]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 06:34:05 nativespace-cdp sshd[13975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.223.12
Sep 26 06:34:07 nativespace-cdp sshd[13975]: Failed password for invalid user usuario from 141.94.223.12 port 59782 ssh2
Sep 26 06:34:07 nativespace-cdp sshd[13975]: Received disconnect from 141.94.223.12 port 59782:11: Bye Bye [preauth]
Sep 26 06:34:07 nativespace-cdp sshd[13975]: Disconnected from 141.94.223.12 port 59782 [preauth]
Sep 26 06:36:34 nativespace-cdp sshd[14528]: Connection closed by 159.100.136.21 port 42052 [preauth]
Sep 26 06:36:43 nativespace-cdp sshd[14549]: Invalid user ubuntu from 47.243.33.176 port 60482
Sep 26 06:36:43 nativespace-cdp sshd[14549]: input_userauth_request: invalid user ubuntu [preauth]
Sep 26 06:36:43 nativespace-cdp sshd[14549]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 06:36:43 nativespace-cdp sshd[14549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.243.33.176
Sep 26 06:36:44 nativespace-cdp sshd[14549]: Failed password for invalid user ubuntu from 47.243.33.176 port 60482 ssh2
Sep 26 06:36:45 nativespace-cdp sshd[14549]: Received disconnect from 47.243.33.176 port 60482:11: Bye Bye [preauth]
Sep 26 06:36:45 nativespace-cdp sshd[14549]: Disconnected from 47.243.33.176 port 60482 [preauth]
Sep 26 06:36:59 nativespace-cdp sshd[14595]: Invalid user usuario from 47.243.33.176 port 34542
Sep 26 06:36:59 nativespace-cdp sshd[14595]: input_userauth_request: invalid user usuario [preauth]
Sep 26 06:36:59 nativespace-cdp sshd[14595]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 06:36:59 nativespace-cdp sshd[14595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.243.33.176
Sep 26 06:37:01 nativespace-cdp sshd[14595]: Failed password for invalid user usuario from 47.243.33.176 port 34542 ssh2
Sep 26 06:41:33 nativespace-cdp sshd[15676]: Connection closed by 159.100.136.21 port 50696 [preauth]
Sep 26 06:46:33 nativespace-cdp sshd[17127]: Connection closed by 159.100.136.21 port 59268 [preauth]
Sep 26 06:51:33 nativespace-cdp sshd[18288]: Connection closed by 159.100.136.21 port 38064 [preauth]
Sep 26 06:56:33 nativespace-cdp sshd[19468]: Connection closed by 159.100.136.21 port 47764 [preauth]
Sep 26 07:01:33 nativespace-cdp sshd[21225]: Connection closed by 159.100.136.21 port 57418 [preauth]
Sep 26 07:06:37 nativespace-cdp sshd[22362]: Connection closed by 159.100.136.21 port 38318 [preauth]
Sep 26 07:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 07:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:09:57 nativespace-cdp sudo[23035]: pam_unix(sudo:session): session closed for user root
Sep 26 07:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 07:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:09:57 nativespace-cdp sudo[23038]: pam_unix(sudo:session): session closed for user root
Sep 26 07:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 07:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:09:59 nativespace-cdp sudo[23041]: pam_unix(sudo:session): session closed for user root
Sep 26 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:09:59 nativespace-cdp sudo[23050]: pam_unix(sudo:session): session closed for user root
Sep 26 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:08 nativespace-cdp sudo[23053]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 07:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:08 nativespace-cdp sudo[23199]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 07:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:08 nativespace-cdp sudo[23204]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 07:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:08 nativespace-cdp sudo[23208]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 07:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:08 nativespace-cdp sudo[23211]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 07:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:08 nativespace-cdp sudo[23214]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 07:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:08 nativespace-cdp sudo[23217]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 07:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:14 nativespace-cdp sudo[23278]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 07:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:16 nativespace-cdp sudo[23286]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=spectrum user-3=hodgesonweb user-4=theblack user-5=still user-6=agproduc user-7=stephani user-8=leereyn1 user-9=booff user-10=foundation user-11=markward user-12=connect9 user-13=athenare user-14=vantagep user-15=maflemin user-16=lbscrmod user-17=ulsukarm user-18=martsblo user-19=dickemery123 user-20=ptkxhsbt user-21=lbhyisi user-22=hhdugcor user-23=magichat user-24=lakesan1 user-25=brmrjxl user-26=strathar user-27=sarafoundation user-28=atestord user-29=wilsonsw user-30=musorguk user-31=megacards user-32=milloyco user-33=gilpin user-34=elecleis user-35=hubmaster user-36=carsinyo user-37=fetch user-38=accooper user-39=ianrayne user-40=connectedshoppin user-41=thqkgnbz user-42=jonhartl user-43=seftvta user-44=ultbcrra user-45=firstres user-46=opaiscyx user-47=coursemc
Sep 26 07:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=firstrel user-49=clarkass user-50=costestimatorco user-51=firstred user-52=southlon user-53=highlegh user-54=skyfirec user-55=alexadmin user-56=innovat1 user-57=askhform user-58=stuartge user-59=nativene user-60=brighto1 user-61=nstriton user-62=firstre2 user-63=vivienn1 user-64=battlere user-65=oneoarco user-66=bedfords user-67=ggaaorgu user-68=belle user-69=newstoda user-70=bemadonn user-71=burydropin user-72=fawcettd user-73=nsceres user-74=beauty user-75=eatspam user-76=darkstar user-77=dhyana user-78=asandcoc user-79=sibtoncc user-80=bwppodcast user-81=zebrapho user-82=steve user-83=cambria1 user-84=cathski user-85=ninejimm user-86=reliable user-87=pugwash user-88=howardon user-89=paulmca1 user-90=cwsocial user-91=hirefootballgame user-92=eugincou user-93=courseme user-94=nscdp user-95=fortunaz user-96=health2045 user-97=leftie user-98=foods user-99=lkpier user-100=philmcph user-101=ctedorgu
Sep 26 07:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=steakbridieme user-103=donnychicago user-104=firstre5 user-105=isleofwi user-106=smrszyqg user-107=hidden user-108=nomistakes user-109=barbersh user-110=tigerlet user-111=attlebor user-112=lucy user-113=onlycont user-114=ranxterc user-115=hodgsonmail user-116=outdoorc user-117=branko user-118=romaldki user-119=tomandle user-120=jennimil user-121=chrisdal user-122=mcdermos user-123=careers user-124=nbhavers user-125=david user-126=oubpgvbx user-127=tstardom user-128=what user-129=cath user-130=sketchy user-131=havantho user-132=nvihkvu user-133=ladburyp user-134=dancinggardener user-135=stagingerris user-136=kategilpin user-137=design user-138=nove user-139=boldover user-140=bakery user-141=sosevalu user-142=crrtipdl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 26 07:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 07:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:17 nativespace-cdp sudo[23293]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 07:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:18 nativespace-cdp sudo[23302]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-dwLYMuiOfdt7ZnVv.~
Sep 26 07:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:18 nativespace-cdp sudo[23306]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-dwLYMuiOfdt7ZnVv.~'
Sep 26 07:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:18 nativespace-cdp sudo[23309]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-dwLYMuiOfdt7ZnVv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 07:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:18 nativespace-cdp sudo[23313]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 07:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:18 nativespace-cdp sudo[23316]: pam_unix(sudo:session): session closed for user root
Sep 26 07:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 07:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 07:10:30 nativespace-cdp sudo[23357]: pam_unix(sudo:session): session closed for user root
Sep 26 07:11:33 nativespace-cdp sshd[23545]: Connection closed by 159.100.136.21 port 47640 [preauth]
Sep 26 07:16:33 nativespace-cdp sshd[24935]: Connection closed by 159.100.136.21 port 57208 [preauth]
Sep 26 07:21:36 nativespace-cdp sshd[26081]: Connection closed by 159.100.136.21 port 37958 [preauth]
Sep 26 07:26:34 nativespace-cdp sshd[27171]: Connection closed by 159.100.136.21 port 47566 [preauth]
Sep 26 07:31:33 nativespace-cdp sshd[28763]: Connection closed by 159.100.136.21 port 56446 [preauth]
Sep 26 07:36:33 nativespace-cdp sshd[29837]: Connection closed by 159.100.136.21 port 37142 [preauth]
Sep 26 07:41:34 nativespace-cdp sshd[31131]: Connection closed by 159.100.136.21 port 46184 [preauth]
Sep 26 07:46:35 nativespace-cdp sshd[32636]: Connection closed by 159.100.136.21 port 54664 [preauth]
Sep 26 07:51:34 nativespace-cdp sshd[1447]: Connection closed by 159.100.136.21 port 35614 [preauth]
Sep 26 07:56:33 nativespace-cdp sshd[2623]: Connection closed by 159.100.136.21 port 45140 [preauth]
Sep 26 08:01:33 nativespace-cdp sshd[4429]: Connection closed by 159.100.136.21 port 54230 [preauth]
Sep 26 08:06:33 nativespace-cdp sshd[6182]: Connection closed by 159.100.136.21 port 35728 [preauth]
Sep 26 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:09:59 nativespace-cdp sudo[6882]: pam_unix(sudo:session): session closed for user root
Sep 26 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:09:59 nativespace-cdp sudo[6885]: pam_unix(sudo:session): session closed for user root
Sep 26 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:01 nativespace-cdp sudo[6888]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 08:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:01 nativespace-cdp sudo[6895]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 08:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:08 nativespace-cdp sudo[6898]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 08:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:08 nativespace-cdp sudo[7041]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 08:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:08 nativespace-cdp sudo[7044]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 08:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:08 nativespace-cdp sudo[7047]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 08:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:08 nativespace-cdp sudo[7051]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 08:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:08 nativespace-cdp sudo[7054]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 08:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:08 nativespace-cdp sudo[7057]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 08:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:11 nativespace-cdp sudo[7066]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 08:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:13 nativespace-cdp sudo[7070]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=romaldki user-2=ranxterc user-3=outdoorc user-4=hodgsonmail user-5=branko user-6=onlycont user-7=attlebor user-8=lucy user-9=careers user-10=nbhavers user-11=david user-12=chrisdal user-13=mcdermos user-14=jennimil user-15=tomandle user-16=design user-17=ladburyp user-18=stagingerris user-19=dancinggardener user-20=kategilpin user-21=cath user-22=sketchy user-23=havantho user-24=nvihkvu user-25=oubpgvbx user-26=tstardom user-27=what user-28=bakery user-29=sosevalu user-30=crrtipdl user-31=boldover user-32=nove user-33=dhyana user-34=beauty user-35=eatspam user-36=darkstar user-37=nsceres user-38=burydropin user-39=fawcettd user-40=steve user-41=bwppodcast user-42=zebrapho user-43=asandcoc user-44=sibtoncc user-45=eugincou user-46=courseme user-47=hirefootballgame user-48=paulmca1
Sep 26 08:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=howardon user-50=pugwash user-51=cwsocial user-52=cambria1 user-53=cathski user-54=reliable user-55=ninejimm user-56=hidden user-57=nomistakes user-58=tigerlet user-59=barbersh user-60=isleofwi user-61=smrszyqg user-62=lkpier user-63=ctedorgu user-64=philmcph user-65=firstre5 user-66=steakbridieme user-67=donnychicago user-68=nscdp user-69=health2045 user-70=fortunaz user-71=leftie user-72=foods user-73=connectedshoppin user-74=thqkgnbz user-75=accooper user-76=ianrayne user-77=hubmaster user-78=carsinyo user-79=fetch user-80=milloyco user-81=gilpin user-82=elecleis user-83=firstred user-84=southlon user-85=highlegh user-86=firstrel user-87=clarkass user-88=costestimatorco user-89=coursemc user-90=opaiscyx user-91=seftvta user-92=jonhartl user-93=ultbcrra user-94=firstres user-95=nativene user-96=innovat1 user-97=stuartge user-98=askhform user-99=skyfirec user-100=alexadmin user-101=belle
Sep 26 08:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=ggaaorgu user-103=newstoda user-104=bemadonn user-105=bedfords user-106=firstre2 user-107=vivienn1 user-108=battlere user-109=oneoarco user-110=brighto1 user-111=nstriton user-112=stephani user-113=leereyn1 user-114=still user-115=agproduc user-116=spectrum user-117=theblack user-118=hodgesonweb user-119=jarvisin user-120=ulsukarm user-121=athenare user-122=connect9 user-123=vantagep user-124=maflemin user-125=lbscrmod user-126=booff user-127=markward user-128=foundation user-129=magichat user-130=lbhyisi user-131=hhdugcor user-132=dickemery123 user-133=ptkxhsbt user-134=martsblo user-135=musorguk user-136=megacards user-137=wilsonsw user-138=strathar user-139=sarafoundation user-140=atestord user-141=brmrjxl user-142=lakesan1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 26 08:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 08:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:14 nativespace-cdp sudo[7080]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 08:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:15 nativespace-cdp sudo[7090]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TosJoFYfRcIEeXsl.~
Sep 26 08:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:15 nativespace-cdp sudo[7093]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TosJoFYfRcIEeXsl.~'
Sep 26 08:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:15 nativespace-cdp sudo[7096]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TosJoFYfRcIEeXsl.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 08:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:15 nativespace-cdp sudo[7100]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 08:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:15 nativespace-cdp sudo[7103]: pam_unix(sudo:session): session closed for user root
Sep 26 08:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 08:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 08:10:29 nativespace-cdp sudo[7162]: pam_unix(sudo:session): session closed for user root
Sep 26 08:11:33 nativespace-cdp sshd[7386]: Connection closed by 159.100.136.21 port 44832 [preauth]
Sep 26 08:16:33 nativespace-cdp sshd[8807]: Connection closed by 159.100.136.21 port 54500 [preauth]
Sep 26 08:21:34 nativespace-cdp sshd[10210]: Connection closed by 159.100.136.21 port 35396 [preauth]
Sep 26 08:26:33 nativespace-cdp sshd[11368]: Connection closed by 159.100.136.21 port 44512 [preauth]
Sep 26 08:31:33 nativespace-cdp sshd[13034]: Connection closed by 159.100.136.21 port 53786 [preauth]
Sep 26 08:36:33 nativespace-cdp sshd[14272]: Connection closed by 159.100.136.21 port 35384 [preauth]
Sep 26 08:41:33 nativespace-cdp sshd[15472]: Connection closed by 159.100.136.21 port 44902 [preauth]
Sep 26 08:41:33 nativespace-cdp sshd[15472]: Connection closed by 159.100.136.21 port 44902 [preauth]
Sep 26 08:46:33 nativespace-cdp sshd[17106]: Connection closed by 159.100.136.21 port 54448 [preauth]
Sep 26 08:51:33 nativespace-cdp sshd[18388]: Connection closed by 159.100.136.21 port 35196 [preauth]
Sep 26 08:56:33 nativespace-cdp sshd[19569]: Connection closed by 159.100.136.21 port 44468 [preauth]
Sep 26 09:01:33 nativespace-cdp sshd[21486]: Connection closed by 159.100.136.21 port 53884 [preauth]
Sep 26 09:06:33 nativespace-cdp sshd[23133]: Connection closed by 159.100.136.21 port 35712 [preauth]
Sep 26 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:09:58 nativespace-cdp sudo[23985]: pam_unix(sudo:session): session closed for user root
Sep 26 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:09:58 nativespace-cdp sudo[23989]: pam_unix(sudo:session): session closed for user root
Sep 26 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:09:59 nativespace-cdp sudo[23992]: pam_unix(sudo:session): session closed for user root
Sep 26 09:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 09:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:09:59 nativespace-cdp sudo[23997]: pam_unix(sudo:session): session closed for user root
Sep 26 09:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 09:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:06 nativespace-cdp sudo[24001]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 09:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:06 nativespace-cdp sudo[24158]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 09:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:06 nativespace-cdp sudo[24162]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 09:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:06 nativespace-cdp sudo[24165]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 09:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:06 nativespace-cdp sudo[24168]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 09:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:06 nativespace-cdp sudo[24171]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 09:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:07 nativespace-cdp sudo[24176]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 09:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:21 nativespace-cdp sudo[24288]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 09:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:23 nativespace-cdp sudo[24294]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=athenare user-3=connect9 user-4=vantagep user-5=maflemin user-6=lbscrmod user-7=markward user-8=booff user-9=foundation user-10=stephani user-11=leereyn1 user-12=still user-13=agproduc user-14=spectrum user-15=theblack user-16=hodgesonweb user-17=jarvisin user-18=musorguk user-19=megacards user-20=wilsonsw user-21=strathar user-22=sarafoundation user-23=atestord user-24=brmrjxl user-25=lakesan1 user-26=magichat user-27=lbhyisi user-28=hhdugcor user-29=dickemery123 user-30=ptkxhsbt user-31=martsblo user-32=firstred user-33=southlon user-34=highlegh user-35=firstrel user-36=clarkass user-37=costestimatorco user-38=coursemc user-39=opaiscyx user-40=seftvta user-41=jonhartl user-42=ultbcrra user-43=firstres user-44=connectedshoppin user-45=thqkgnbz user-46=accooper user-47=ianrayne
Sep 26 09:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=hubmaster user-49=carsinyo user-50=fetch user-51=milloyco user-52=gilpin user-53=elecleis user-54=ggaaorgu user-55=belle user-56=newstoda user-57=bemadonn user-58=bedfords user-59=firstre2 user-60=vivienn1 user-61=battlere user-62=oneoarco user-63=brighto1 user-64=nstriton user-65=nativene user-66=innovat1 user-67=askhform user-68=stuartge user-69=skyfirec user-70=alexadmin user-71=steve user-72=bwppodcast user-73=zebrapho user-74=asandcoc user-75=sibtoncc user-76=dhyana user-77=beauty user-78=eatspam user-79=darkstar user-80=nsceres user-81=burydropin user-82=fawcettd user-83=hidden user-84=nomistakes user-85=barbersh user-86=tigerlet user-87=isleofwi user-88=smrszyqg user-89=lkpier user-90=ctedorgu user-91=philmcph user-92=steakbridieme user-93=firstre5 user-94=donnychicago user-95=nscdp user-96=fortunaz user-97=health2045 user-98=leftie user-99=foods user-100=eugincou user-101=courseme
Sep 26 09:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hirefootballgame user-103=pugwash user-104=howardon user-105=paulmca1 user-106=cwsocial user-107=cathski user-108=cambria1 user-109=ninejimm user-110=reliable user-111=nbhavers user-112=careers user-113=david user-114=chrisdal user-115=mcdermos user-116=jennimil user-117=tomandle user-118=romaldki user-119=ranxterc user-120=outdoorc user-121=hodgsonmail user-122=branko user-123=onlycont user-124=attlebor user-125=lucy user-126=bakery user-127=sosevalu user-128=crrtipdl user-129=boldover user-130=nove user-131=design user-132=ladburyp user-133=stagingerris user-134=dancinggardener user-135=kategilpin user-136=cath user-137=sketchy user-138=havantho user-139=nvihkvu user-140=oubpgvbx user-141=tstardom user-142=what feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 26 09:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:24 nativespace-cdp sudo[24300]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 09:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:25 nativespace-cdp sudo[24308]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v6ltpgN82VlLIB8P.~
Sep 26 09:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:25 nativespace-cdp sudo[24312]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v6ltpgN82VlLIB8P.~'
Sep 26 09:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:25 nativespace-cdp sudo[24315]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v6ltpgN82VlLIB8P.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 09:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:25 nativespace-cdp sudo[24319]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 09:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:25 nativespace-cdp sudo[24322]: pam_unix(sudo:session): session closed for user root
Sep 26 09:10:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 09:10:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 09:10:43 nativespace-cdp sudo[24456]: pam_unix(sudo:session): session closed for user root
Sep 26 09:11:33 nativespace-cdp sshd[24684]: Connection closed by 159.100.136.21 port 45218 [preauth]
Sep 26 09:16:35 nativespace-cdp sshd[26439]: Connection closed by 159.100.136.21 port 54356 [preauth]
Sep 26 09:21:34 nativespace-cdp sshd[27838]: Connection closed by 159.100.136.21 port 34074 [preauth]
Sep 26 09:26:34 nativespace-cdp sshd[29003]: Connection closed by 159.100.136.21 port 43244 [preauth]
Sep 26 09:31:33 nativespace-cdp sshd[30636]: Connection closed by 159.100.136.21 port 52666 [preauth]
Sep 26 09:36:34 nativespace-cdp sshd[31911]: Connection closed by 159.100.136.21 port 34148 [preauth]
Sep 26 09:36:55 nativespace-cdp sshd[32048]: Invalid user test from 51.158.120.121 port 40852
Sep 26 09:36:55 nativespace-cdp sshd[32048]: input_userauth_request: invalid user test [preauth]
Sep 26 09:36:55 nativespace-cdp sshd[32048]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 09:36:55 nativespace-cdp sshd[32048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.120.121
Sep 26 09:36:56 nativespace-cdp sshd[32048]: Failed password for invalid user test from 51.158.120.121 port 40852 ssh2
Sep 26 09:37:00 nativespace-cdp sshd[32048]: Received disconnect from 51.158.120.121 port 40852:11: Bye Bye [preauth]
Sep 26 09:37:00 nativespace-cdp sshd[32048]: Disconnected from 51.158.120.121 port 40852 [preauth]
Sep 26 09:41:33 nativespace-cdp sshd[905]: Connection closed by 159.100.136.21 port 43872 [preauth]
Sep 26 09:42:51 nativespace-cdp sshd[1163]: Invalid user abhishek from 51.158.120.121 port 49392
Sep 26 09:42:51 nativespace-cdp sshd[1163]: input_userauth_request: invalid user abhishek [preauth]
Sep 26 09:42:51 nativespace-cdp sshd[1163]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 09:42:51 nativespace-cdp sshd[1163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.120.121
Sep 26 09:42:53 nativespace-cdp sshd[1163]: Failed password for invalid user abhishek from 51.158.120.121 port 49392 ssh2
Sep 26 09:42:54 nativespace-cdp sshd[1163]: Received disconnect from 51.158.120.121 port 49392:11: Bye Bye [preauth]
Sep 26 09:42:54 nativespace-cdp sshd[1163]: Disconnected from 51.158.120.121 port 49392 [preauth]
Sep 26 09:43:31 nativespace-cdp sshd[1413]: Invalid user test from 51.158.120.121 port 55382
Sep 26 09:43:31 nativespace-cdp sshd[1413]: input_userauth_request: invalid user test [preauth]
Sep 26 09:43:31 nativespace-cdp sshd[1413]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 09:43:31 nativespace-cdp sshd[1413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.120.121
Sep 26 09:43:33 nativespace-cdp sshd[1413]: Failed password for invalid user test from 51.158.120.121 port 55382 ssh2
Sep 26 09:43:33 nativespace-cdp sshd[1413]: Received disconnect from 51.158.120.121 port 55382:11: Bye Bye [preauth]
Sep 26 09:43:33 nativespace-cdp sshd[1413]: Disconnected from 51.158.120.121 port 55382 [preauth]
Sep 26 09:46:33 nativespace-cdp sshd[2376]: Connection closed by 159.100.136.21 port 53288 [preauth]
Sep 26 09:51:35 nativespace-cdp sshd[3992]: Connection closed by 159.100.136.21 port 33934 [preauth]
Sep 26 09:56:33 nativespace-cdp sshd[5110]: Connection closed by 159.100.136.21 port 42824 [preauth]
Sep 26 10:01:33 nativespace-cdp sshd[7033]: Connection closed by 159.100.136.21 port 51940 [preauth]
Sep 26 10:06:35 nativespace-cdp sshd[8613]: Connection closed by 159.100.136.21 port 33374 [preauth]
Sep 26 10:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 10:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:09:58 nativespace-cdp sudo[9503]: pam_unix(sudo:session): session closed for user root
Sep 26 10:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 10:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:09:58 nativespace-cdp sudo[9507]: pam_unix(sudo:session): session closed for user root
Sep 26 10:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 10:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:01 nativespace-cdp sudo[9510]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 10:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:01 nativespace-cdp sudo[9546]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 10:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:09 nativespace-cdp sudo[9608]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:09 nativespace-cdp sudo[9690]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 10:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:10 nativespace-cdp sudo[9696]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 10:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:10 nativespace-cdp sudo[9701]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 10:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:10 nativespace-cdp sudo[9705]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 10:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:10 nativespace-cdp sudo[9709]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 10:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:10 nativespace-cdp sudo[9712]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 10:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:13 nativespace-cdp sudo[9723]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 10:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:15 nativespace-cdp sudo[9728]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=innovat1 user-4=stuartge user-5=askhform user-6=nativene user-7=brighto1 user-8=nstriton user-9=firstre2 user-10=vivienn1 user-11=battlere user-12=oneoarco user-13=bedfords user-14=ggaaorgu user-15=belle user-16=newstoda user-17=bemadonn user-18=gilpin user-19=milloyco user-20=elecleis user-21=hubmaster user-22=carsinyo user-23=fetch user-24=accooper user-25=ianrayne user-26=connectedshoppin user-27=thqkgnbz user-28=jonhartl user-29=seftvta user-30=ultbcrra user-31=firstres user-32=opaiscyx user-33=coursemc user-34=firstrel user-35=clarkass user-36=costestimatorco user-37=firstred user-38=southlon user-39=highlegh user-40=martsblo user-41=dickemery123 user-42=ptkxhsbt user-43=lbhyisi user-44=hhdugcor user-45=magichat user-46=lakesan1 user-47=brmrjxl
Sep 26 10:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=strathar user-49=sarafoundation user-50=atestord user-51=wilsonsw user-52=musorguk user-53=megacards user-54=jarvisin user-55=spectrum user-56=hodgesonweb user-57=theblack user-58=still user-59=agproduc user-60=stephani user-61=leereyn1 user-62=markward user-63=booff user-64=foundation user-65=athenare user-66=connect9 user-67=vantagep user-68=maflemin user-69=lbscrmod user-70=ulsukarm user-71=tstardom user-72=oubpgvbx user-73=what user-74=sketchy user-75=cath user-76=havantho user-77=nvihkvu user-78=ladburyp user-79=dancinggardener user-80=stagingerris user-81=kategilpin user-82=design user-83=nove user-84=boldover user-85=bakery user-86=sosevalu user-87=crrtipdl user-88=attlebor user-89=lucy user-90=onlycont user-91=outdoorc user-92=ranxterc user-93=hodgsonmail user-94=branko user-95=romaldki user-96=tomandle user-97=jennimil user-98=chrisdal user-99=mcdermos user-100=careers user-101=nbhavers
Sep 26 10:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=david user-103=cambria1 user-104=cathski user-105=ninejimm user-106=reliable user-107=howardon user-108=pugwash user-109=paulmca1 user-110=cwsocial user-111=hirefootballgame user-112=eugincou user-113=courseme user-114=nscdp user-115=health2045 user-116=fortunaz user-117=foods user-118=leftie user-119=lkpier user-120=ctedorgu user-121=philmcph user-122=steakbridieme user-123=firstre5 user-124=donnychicago user-125=isleofwi user-126=smrszyqg user-127=hidden user-128=nomistakes user-129=barbersh user-130=tigerlet user-131=burydropin user-132=fawcettd user-133=nsceres user-134=beauty user-135=eatspam user-136=darkstar user-137=dhyana user-138=asandcoc user-139=sibtoncc user-140=bwppodcast user-141=zebrapho user-142=steve feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 26 10:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 10:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:17 nativespace-cdp sudo[9740]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 10:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:17 nativespace-cdp sudo[9750]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-95n5O54zOLzWAbcO.~
Sep 26 10:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:17 nativespace-cdp sudo[9753]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-95n5O54zOLzWAbcO.~'
Sep 26 10:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:17 nativespace-cdp sudo[9758]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-95n5O54zOLzWAbcO.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 10:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:17 nativespace-cdp sudo[9762]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 10:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:18 nativespace-cdp sudo[9767]: pam_unix(sudo:session): session closed for user root
Sep 26 10:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 10:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 10:10:25 nativespace-cdp sudo[9804]: pam_unix(sudo:session): session closed for user root
Sep 26 10:11:37 nativespace-cdp sshd[10127]: Did not receive identification string from 159.100.136.21 port 42422
Sep 26 10:16:33 nativespace-cdp sshd[11694]: Connection closed by 159.100.136.21 port 51742 [preauth]
Sep 26 10:21:33 nativespace-cdp sshd[13117]: Connection closed by 159.100.136.21 port 60654 [preauth]
Sep 26 10:26:37 nativespace-cdp sshd[14414]: Connection closed by 159.100.136.21 port 42112 [preauth]
Sep 26 10:28:28 nativespace-cdp sshd[14873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.233.25.20  user=root
Sep 26 10:28:28 nativespace-cdp sshd[14873]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 26 10:28:29 nativespace-cdp sshd[14873]: Failed password for root from 191.233.25.20 port 1216 ssh2
Sep 26 10:28:30 nativespace-cdp sshd[14873]: Received disconnect from 191.233.25.20 port 1216:11: Bye Bye [preauth]
Sep 26 10:28:30 nativespace-cdp sshd[14873]: Disconnected from 191.233.25.20 port 1216 [preauth]
Sep 26 10:29:29 nativespace-cdp sshd[15559]: Invalid user test from 82.207.8.218 port 52380
Sep 26 10:29:29 nativespace-cdp sshd[15559]: input_userauth_request: invalid user test [preauth]
Sep 26 10:29:29 nativespace-cdp sshd[15559]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:29:29 nativespace-cdp sshd[15559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.207.8.218
Sep 26 10:29:30 nativespace-cdp sshd[15559]: Failed password for invalid user test from 82.207.8.218 port 52380 ssh2
Sep 26 10:29:30 nativespace-cdp sshd[15559]: Received disconnect from 82.207.8.218 port 52380:11: Bye Bye [preauth]
Sep 26 10:29:30 nativespace-cdp sshd[15559]: Disconnected from 82.207.8.218 port 52380 [preauth]
Sep 26 10:31:33 nativespace-cdp sshd[16350]: Connection closed by 159.100.136.21 port 50748 [preauth]
Sep 26 10:31:43 nativespace-cdp sshd[16374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.67.46  user=root
Sep 26 10:31:43 nativespace-cdp sshd[16374]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 26 10:31:45 nativespace-cdp sshd[16374]: Failed password for root from 113.161.67.46 port 42110 ssh2
Sep 26 10:31:45 nativespace-cdp sshd[16374]: Received disconnect from 113.161.67.46 port 42110:11: Bye Bye [preauth]
Sep 26 10:31:45 nativespace-cdp sshd[16374]: Disconnected from 113.161.67.46 port 42110 [preauth]
Sep 26 10:31:46 nativespace-cdp sshd[16392]: Invalid user test from 119.202.128.28 port 54124
Sep 26 10:31:46 nativespace-cdp sshd[16392]: input_userauth_request: invalid user test [preauth]
Sep 26 10:31:46 nativespace-cdp sshd[16392]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:31:46 nativespace-cdp sshd[16392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.202.128.28
Sep 26 10:31:48 nativespace-cdp sshd[16392]: Failed password for invalid user test from 119.202.128.28 port 54124 ssh2
Sep 26 10:31:50 nativespace-cdp sshd[16392]: Received disconnect from 119.202.128.28 port 54124:11: Bye Bye [preauth]
Sep 26 10:31:50 nativespace-cdp sshd[16392]: Disconnected from 119.202.128.28 port 54124 [preauth]
Sep 26 10:33:30 nativespace-cdp sshd[16830]: Connection closed by 14.241.225.1 port 54705 [preauth]
Sep 26 10:33:52 nativespace-cdp sshd[16891]: Invalid user test from 82.207.8.218 port 9475
Sep 26 10:33:52 nativespace-cdp sshd[16891]: input_userauth_request: invalid user test [preauth]
Sep 26 10:33:52 nativespace-cdp sshd[16891]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:33:52 nativespace-cdp sshd[16891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.207.8.218
Sep 26 10:33:54 nativespace-cdp sshd[16891]: Failed password for invalid user test from 82.207.8.218 port 9475 ssh2
Sep 26 10:33:54 nativespace-cdp sshd[16891]: Received disconnect from 82.207.8.218 port 9475:11: Bye Bye [preauth]
Sep 26 10:33:54 nativespace-cdp sshd[16891]: Disconnected from 82.207.8.218 port 9475 [preauth]
Sep 26 10:34:19 nativespace-cdp sshd[16983]: Invalid user ubuntu from 119.202.128.28 port 33752
Sep 26 10:34:19 nativespace-cdp sshd[16983]: input_userauth_request: invalid user ubuntu [preauth]
Sep 26 10:34:19 nativespace-cdp sshd[16983]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:34:19 nativespace-cdp sshd[16983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.202.128.28
Sep 26 10:34:21 nativespace-cdp sshd[16989]: Invalid user test from 113.161.67.46 port 42192
Sep 26 10:34:21 nativespace-cdp sshd[16989]: input_userauth_request: invalid user test [preauth]
Sep 26 10:34:21 nativespace-cdp sshd[16989]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:34:21 nativespace-cdp sshd[16989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.67.46
Sep 26 10:34:21 nativespace-cdp sshd[16983]: Failed password for invalid user ubuntu from 119.202.128.28 port 33752 ssh2
Sep 26 10:34:21 nativespace-cdp sshd[16983]: Received disconnect from 119.202.128.28 port 33752:11: Bye Bye [preauth]
Sep 26 10:34:21 nativespace-cdp sshd[16983]: Disconnected from 119.202.128.28 port 33752 [preauth]
Sep 26 10:34:23 nativespace-cdp sshd[16989]: Failed password for invalid user test from 113.161.67.46 port 42192 ssh2
Sep 26 10:34:23 nativespace-cdp sshd[16989]: Received disconnect from 113.161.67.46 port 42192:11: Bye Bye [preauth]
Sep 26 10:34:23 nativespace-cdp sshd[16989]: Disconnected from 113.161.67.46 port 42192 [preauth]
Sep 26 10:34:27 nativespace-cdp sshd[17021]: Invalid user user from 82.207.8.218 port 15524
Sep 26 10:34:27 nativespace-cdp sshd[17021]: input_userauth_request: invalid user user [preauth]
Sep 26 10:34:27 nativespace-cdp sshd[17021]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:34:27 nativespace-cdp sshd[17021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.207.8.218
Sep 26 10:34:29 nativespace-cdp sshd[17021]: Failed password for invalid user user from 82.207.8.218 port 15524 ssh2
Sep 26 10:34:32 nativespace-cdp sshd[17024]: Invalid user deploy from 191.233.25.20 port 1216
Sep 26 10:34:32 nativespace-cdp sshd[17024]: input_userauth_request: invalid user deploy [preauth]
Sep 26 10:34:32 nativespace-cdp sshd[17024]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:34:32 nativespace-cdp sshd[17024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.233.25.20
Sep 26 10:34:33 nativespace-cdp sshd[17024]: Failed password for invalid user deploy from 191.233.25.20 port 1216 ssh2
Sep 26 10:34:34 nativespace-cdp sshd[17024]: Received disconnect from 191.233.25.20 port 1216:11: Bye Bye [preauth]
Sep 26 10:34:34 nativespace-cdp sshd[17024]: Disconnected from 191.233.25.20 port 1216 [preauth]
Sep 26 10:35:06 nativespace-cdp sshd[17282]: Connection closed by 119.202.128.28 port 53100 [preauth]
Sep 26 10:35:17 nativespace-cdp sshd[17315]: Invalid user steam from 191.233.25.20 port 1216
Sep 26 10:35:17 nativespace-cdp sshd[17315]: input_userauth_request: invalid user steam [preauth]
Sep 26 10:35:17 nativespace-cdp sshd[17315]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:35:17 nativespace-cdp sshd[17315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.233.25.20
Sep 26 10:35:18 nativespace-cdp sshd[17315]: Failed password for invalid user steam from 191.233.25.20 port 1216 ssh2
Sep 26 10:35:50 nativespace-cdp sshd[17499]: Invalid user support from 119.202.128.28 port 42168
Sep 26 10:35:50 nativespace-cdp sshd[17499]: input_userauth_request: invalid user support [preauth]
Sep 26 10:35:50 nativespace-cdp sshd[17499]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:35:50 nativespace-cdp sshd[17499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.202.128.28
Sep 26 10:35:52 nativespace-cdp sshd[17499]: Failed password for invalid user support from 119.202.128.28 port 42168 ssh2
Sep 26 10:35:53 nativespace-cdp sshd[17499]: Received disconnect from 119.202.128.28 port 42168:11: Bye Bye [preauth]
Sep 26 10:35:53 nativespace-cdp sshd[17499]: Disconnected from 119.202.128.28 port 42168 [preauth]
Sep 26 10:36:13 nativespace-cdp sshd[17609]: Invalid user ubuntu from 113.161.67.46 port 42676
Sep 26 10:36:13 nativespace-cdp sshd[17609]: input_userauth_request: invalid user ubuntu [preauth]
Sep 26 10:36:13 nativespace-cdp sshd[17609]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 10:36:13 nativespace-cdp sshd[17609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.67.46
Sep 26 10:36:15 nativespace-cdp sshd[17609]: Failed password for invalid user ubuntu from 113.161.67.46 port 42676 ssh2
Sep 26 10:36:16 nativespace-cdp sshd[17609]: Received disconnect from 113.161.67.46 port 42676:11: Bye Bye [preauth]
Sep 26 10:36:16 nativespace-cdp sshd[17609]: Disconnected from 113.161.67.46 port 42676 [preauth]
Sep 26 10:36:33 nativespace-cdp sshd[17718]: Connection closed by 159.100.136.21 port 59776 [preauth]
Sep 26 10:41:34 nativespace-cdp sshd[18935]: Connection closed by 159.100.136.21 port 40828 [preauth]
Sep 26 10:46:34 nativespace-cdp sshd[20672]: Connection closed by 159.100.136.21 port 50698 [preauth]
Sep 26 10:51:35 nativespace-cdp sshd[22049]: Connection closed by 159.100.136.21 port 59800 [preauth]
Sep 26 10:56:33 nativespace-cdp sshd[23399]: Connection closed by 159.100.136.21 port 40560 [preauth]
Sep 26 11:01:34 nativespace-cdp sshd[25069]: Connection closed by 159.100.136.21 port 50166 [preauth]
Sep 26 11:06:33 nativespace-cdp sshd[26463]: Connection closed by 159.100.136.21 port 59922 [preauth]
Sep 26 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:09:58 nativespace-cdp sudo[27283]: pam_unix(sudo:session): session closed for user root
Sep 26 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:09:58 nativespace-cdp sudo[27286]: pam_unix(sudo:session): session closed for user root
Sep 26 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:09:58 nativespace-cdp sudo[27289]: pam_unix(sudo:session): session closed for user root
Sep 26 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:09:58 nativespace-cdp sudo[27294]: pam_unix(sudo:session): session closed for user root
Sep 26 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:02 nativespace-cdp sudo[27298]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:02 nativespace-cdp sudo[27404]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:02 nativespace-cdp sudo[27408]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:02 nativespace-cdp sudo[27411]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:02 nativespace-cdp sudo[27414]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:02 nativespace-cdp sudo[27423]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:02 nativespace-cdp sudo[27426]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:11 nativespace-cdp sudo[27481]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:11 nativespace-cdp sudo[27486]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=wilsonsw user-2=musorguk user-3=megacards user-4=lakesan1 user-5=brmrjxl user-6=strathar user-7=sarafoundation user-8=atestord user-9=lbhyisi user-10=hhdugcor user-11=magichat user-12=martsblo user-13=dickemery123 user-14=ptkxhsbt user-15=ulsukarm user-16=booff user-17=foundation user-18=markward user-19=connect9 user-20=athenare user-21=vantagep user-22=maflemin user-23=lbscrmod user-24=still user-25=agproduc user-26=stephani user-27=leereyn1 user-28=jarvisin user-29=spectrum user-30=hodgesonweb user-31=theblack user-32=bedfords user-33=belle user-34=ggaaorgu user-35=newstoda user-36=bemadonn user-37=brighto1 user-38=nstriton user-39=firstre2 user-40=vivienn1 user-41=battlere user-42=oneoarco user-43=innovat1 user-44=stuartge user-45=askhform user-46=nativene user-47=alexadmin user-48=skyfirec
Sep 26 11:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstrel user-50=clarkass user-51=costestimatorco user-52=firstred user-53=southlon user-54=highlegh user-55=jonhartl user-56=seftvta user-57=ultbcrra user-58=firstres user-59=coursemc user-60=opaiscyx user-61=accooper user-62=ianrayne user-63=connectedshoppin user-64=thqkgnbz user-65=milloyco user-66=gilpin user-67=elecleis user-68=hubmaster user-69=carsinyo user-70=fetch user-71=isleofwi user-72=smrszyqg user-73=hidden user-74=nomistakes user-75=tigerlet user-76=barbersh user-77=nscdp user-78=fortunaz user-79=health2045 user-80=foods user-81=leftie user-82=lkpier user-83=ctedorgu user-84=philmcph user-85=firstre5 user-86=steakbridieme user-87=donnychicago user-88=hirefootballgame user-89=eugincou user-90=courseme user-91=cambria1 user-92=cathski user-93=reliable user-94=ninejimm user-95=howardon user-96=pugwash user-97=paulmca1 user-98=cwsocial user-99=bwppodcast user-100=zebrapho user-101=steve
Sep 26 11:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=asandcoc user-103=sibtoncc user-104=beauty user-105=eatspam user-106=darkstar user-107=dhyana user-108=burydropin user-109=fawcettd user-110=nsceres user-111=bakery user-112=sosevalu user-113=crrtipdl user-114=nove user-115=boldover user-116=ladburyp user-117=stagingerris user-118=dancinggardener user-119=kategilpin user-120=design user-121=oubpgvbx user-122=tstardom user-123=what user-124=sketchy user-125=cath user-126=havantho user-127=nvihkvu user-128=chrisdal user-129=mcdermos user-130=nbhavers user-131=careers user-132=david user-133=tomandle user-134=jennimil user-135=ranxterc user-136=outdoorc user-137=hodgsonmail user-138=branko user-139=romaldki user-140=attlebor user-141=lucy user-142=onlycont feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 11:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:12 nativespace-cdp sudo[27490]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 26 11:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:14 nativespace-cdp sudo[27549]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 26 11:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 26 11:10:14 nativespace-cdp sudo[27554]: pam_unix(sudo:session): session closed for user onlycont
Sep 26 11:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 26 11:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:16 nativespace-cdp sudo[27566]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 26 11:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 11:10:16 nativespace-cdp sudo[27579]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 11:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 26 11:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:19 nativespace-cdp sudo[27602]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 26 11:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 26 11:10:19 nativespace-cdp sudo[27607]: pam_unix(sudo:session): session closed for user lkpier
Sep 26 11:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 26 11:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:20 nativespace-cdp sudo[27618]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 26 11:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 26 11:10:20 nativespace-cdp sudo[27623]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 26 11:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 26 11:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 26 11:10:20 nativespace-cdp sudo[27636]: pam_unix(sudo:session): session closed for user oneoarco
Sep 26 11:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 26 11:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:21 nativespace-cdp sudo[27648]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 26 11:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 26 11:10:21 nativespace-cdp sudo[27656]: pam_unix(sudo:session): session closed for user fortunaz
Sep 26 11:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 26 11:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:21 nativespace-cdp sudo[27667]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 11:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:21 nativespace-cdp sudo[27670]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 26 11:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:37 nativespace-cdp sudo[28601]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 26 11:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:37 nativespace-cdp sudo[28605]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:39 nativespace-cdp sudo[28611]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ueOcrYPuO97QvEQQ.~
Sep 26 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:39 nativespace-cdp sudo[28615]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ueOcrYPuO97QvEQQ.~'
Sep 26 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:39 nativespace-cdp sudo[28618]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ueOcrYPuO97QvEQQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:39 nativespace-cdp sudo[28622]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:39 nativespace-cdp sudo[28625]: pam_unix(sudo:session): session closed for user root
Sep 26 11:10:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 11:10:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 11:10:49 nativespace-cdp sudo[28670]: pam_unix(sudo:session): session closed for user root
Sep 26 11:11:33 nativespace-cdp sshd[28841]: Connection closed by 159.100.136.21 port 40470 [preauth]
Sep 26 11:16:33 nativespace-cdp sshd[31030]: Connection closed by 159.100.136.21 port 49834 [preauth]
Sep 26 11:21:33 nativespace-cdp sshd[32396]: Connection closed by 159.100.136.21 port 58858 [preauth]
Sep 26 11:26:33 nativespace-cdp sshd[1270]: Connection closed by 159.100.136.21 port 40266 [preauth]
Sep 26 11:31:33 nativespace-cdp sshd[2967]: Connection closed by 159.100.136.21 port 50028 [preauth]
Sep 26 11:36:34 nativespace-cdp sshd[4340]: Connection closed by 159.100.136.21 port 59636 [preauth]
Sep 26 11:41:33 nativespace-cdp sshd[5557]: Connection closed by 159.100.136.21 port 40926 [preauth]
Sep 26 11:46:34 nativespace-cdp sshd[6905]: Connection closed by 159.100.136.21 port 50818 [preauth]
Sep 26 11:51:33 nativespace-cdp sshd[8518]: Connection closed by 159.100.136.21 port 60286 [preauth]
Sep 26 11:56:35 nativespace-cdp sshd[9653]: Connection closed by 159.100.136.21 port 41634 [preauth]
Sep 26 12:01:36 nativespace-cdp sshd[11316]: Connection closed by 159.100.136.21 port 50840 [preauth]
Sep 26 12:06:33 nativespace-cdp sshd[12591]: Connection closed by 159.100.136.21 port 60498 [preauth]
Sep 26 12:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 12:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:52 nativespace-cdp sudo[13359]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 12:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:52 nativespace-cdp sudo[13363]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 12:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:53 nativespace-cdp sudo[13366]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 12:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:53 nativespace-cdp sudo[13372]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 12:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:55 nativespace-cdp sudo[13375]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 12:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:56 nativespace-cdp sudo[13391]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 12:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:56 nativespace-cdp sudo[13394]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 12:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:56 nativespace-cdp sudo[13397]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 12:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:56 nativespace-cdp sudo[13400]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 12:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:56 nativespace-cdp sudo[13404]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 12:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:56 nativespace-cdp sudo[13407]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:58 nativespace-cdp sudo[13417]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:58 nativespace-cdp sudo[13423]: pam_unix(sudo:session): session closed for user root
Sep 26 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cambria1 user-2=cathski user-3=reliable user-4=ninejimm user-5=howardon user-6=pugwash user-7=paulmca1 user-8=cwsocial user-9=hirefootballgame user-10=eugincou user-11=courseme user-12=nscdp user-13=fortunaz user-14=health2045 user-15=foods user-16=leftie user-17=lkpier user-18=ctedorgu user-19=philmcph user-20=steakbridieme user-21=donnychicago user-22=firstre5 user-23=smrszyqg user-24=isleofwi user-25=hidden user-26=nomistakes user-27=barbersh user-28=tigerlet user-29=burydropin user-30=fawcettd user-31=nsceres user-32=beauty user-33=eatspam user-34=darkstar user-35=dhyana user-36=asandcoc user-37=sibtoncc user-38=bwppodcast user-39=zebrapho user-40=steve user-41=tstardom user-42=oubpgvbx user-43=what user-44=cath user-45=sketchy user-46=havantho user-47=nvihkvu user-48=ladburyp
Sep 26 12:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=stagingerris user-50=dancinggardener user-51=kategilpin user-52=design user-53=nove user-54=boldover user-55=bakery user-56=sosevalu user-57=crrtipdl user-58=attlebor user-59=lucy user-60=onlycont user-61=ranxterc user-62=hodgsonmail user-63=outdoorc user-64=branko user-65=romaldki user-66=tomandle user-67=jennimil user-68=chrisdal user-69=mcdermos user-70=nbhavers user-71=careers user-72=david user-73=martsblo user-74=dickemery123 user-75=ptkxhsbt user-76=lbhyisi user-77=hhdugcor user-78=magichat user-79=brmrjxl user-80=lakesan1 user-81=strathar user-82=sarafoundation user-83=atestord user-84=wilsonsw user-85=musorguk user-86=megacards user-87=jarvisin user-88=spectrum user-89=hodgesonweb user-90=theblack user-91=still user-92=agproduc user-93=stephani user-94=leereyn1 user-95=booff user-96=foundation user-97=markward user-98=connect9 user-99=athenare user-100=vantagep user-101=maflemin user-102=lbscrmod
Sep 26 12:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ulsukarm user-104=skyfirec user-105=alexadmin user-106=innovat1 user-107=askhform user-108=stuartge user-109=nativene user-110=brighto1 user-111=nstriton user-112=firstre2 user-113=vivienn1 user-114=battlere user-115=oneoarco user-116=bedfords user-117=ggaaorgu user-118=belle user-119=newstoda user-120=bemadonn user-121=milloyco user-122=gilpin user-123=elecleis user-124=hubmaster user-125=carsinyo user-126=fetch user-127=accooper user-128=ianrayne user-129=connectedshoppin user-130=thqkgnbz user-131=seftvta user-132=jonhartl user-133=ultbcrra user-134=firstres user-135=opaiscyx user-136=coursemc user-137=firstrel user-138=clarkass user-139=costestimatorco user-140=firstred user-141=southlon user-142=highlegh feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 12:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:09:59 nativespace-cdp sudo[13427]: pam_unix(sudo:session): session closed for user root
Sep 26 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:10:00 nativespace-cdp sudo[13435]: pam_unix(sudo:session): session closed for user root
Sep 26 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qd9WCwihHa0EoyPb.~
Sep 26 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:10:00 nativespace-cdp sudo[13438]: pam_unix(sudo:session): session closed for user root
Sep 26 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qd9WCwihHa0EoyPb.~'
Sep 26 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:10:00 nativespace-cdp sudo[13441]: pam_unix(sudo:session): session closed for user root
Sep 26 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qd9WCwihHa0EoyPb.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:10:00 nativespace-cdp sudo[13445]: pam_unix(sudo:session): session closed for user root
Sep 26 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:10:00 nativespace-cdp sudo[13448]: pam_unix(sudo:session): session closed for user root
Sep 26 12:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 12:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 12:10:06 nativespace-cdp sudo[13605]: pam_unix(sudo:session): session closed for user root
Sep 26 12:11:34 nativespace-cdp sshd[13895]: Connection closed by 159.100.136.21 port 41782 [preauth]
Sep 26 12:16:33 nativespace-cdp sshd[15540]: Connection closed by 159.100.136.21 port 51466 [preauth]
Sep 26 12:21:34 nativespace-cdp sshd[16734]: Connection closed by 159.100.136.21 port 32784 [preauth]
Sep 26 12:26:33 nativespace-cdp sshd[17812]: Connection closed by 159.100.136.21 port 42468 [preauth]
Sep 26 12:31:34 nativespace-cdp sshd[19433]: Connection closed by 159.100.136.21 port 51946 [preauth]
Sep 26 12:36:35 nativespace-cdp sshd[20556]: Connection closed by 159.100.136.21 port 33518 [preauth]
Sep 26 12:41:33 nativespace-cdp sshd[21682]: Connection closed by 159.100.136.21 port 42716 [preauth]
Sep 26 12:46:33 nativespace-cdp sshd[22995]: Connection closed by 159.100.136.21 port 52284 [preauth]
Sep 26 12:51:35 nativespace-cdp sshd[24391]: Connection closed by 159.100.136.21 port 33572 [preauth]
Sep 26 12:56:33 nativespace-cdp sshd[25589]: Connection closed by 159.100.136.21 port 41330 [preauth]
Sep 26 13:01:33 nativespace-cdp sshd[27349]: Connection closed by 159.100.136.21 port 50060 [preauth]
Sep 26 13:06:35 nativespace-cdp sshd[28740]: Connection closed by 159.100.136.21 port 59718 [preauth]
Sep 26 13:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 13:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:09:58 nativespace-cdp sudo[29582]: pam_unix(sudo:session): session closed for user root
Sep 26 13:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 13:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:09:58 nativespace-cdp sudo[29585]: pam_unix(sudo:session): session closed for user root
Sep 26 13:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 13:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:09:59 nativespace-cdp sudo[29588]: pam_unix(sudo:session): session closed for user root
Sep 26 13:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 13:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:09:59 nativespace-cdp sudo[29597]: pam_unix(sudo:session): session closed for user root
Sep 26 13:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 13:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:05 nativespace-cdp sudo[29601]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 13:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:05 nativespace-cdp sudo[29740]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 13:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:05 nativespace-cdp sudo[29745]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 13:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:05 nativespace-cdp sudo[29748]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 13:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:05 nativespace-cdp sudo[29752]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 13:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:05 nativespace-cdp sudo[29755]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 13:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:05 nativespace-cdp sudo[29758]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 13:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:08 nativespace-cdp sudo[29770]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 13:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:09 nativespace-cdp sudo[29821]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=kategilpin user-2=stagingerris user-3=dancinggardener user-4=ladburyp user-5=design user-6=what user-7=tstardom user-8=oubpgvbx user-9=nvihkvu user-10=havantho user-11=sketchy user-12=cath user-13=crrtipdl user-14=sosevalu user-15=bakery user-16=nove user-17=boldover user-18=branko user-19=ranxterc user-20=hodgsonmail user-21=outdoorc user-22=romaldki user-23=lucy user-24=attlebor user-25=onlycont user-26=mcdermos user-27=chrisdal user-28=david user-29=nbhavers user-30=careers user-31=tomandle user-32=jennimil user-33=hirefootballgame user-34=courseme user-35=eugincou user-36=reliable user-37=ninejimm user-38=cathski user-39=cambria1 user-40=cwsocial user-41=paulmca1 user-42=pugwash user-43=howardon user-44=smrszyqg user-45=isleofwi user-46=barbersh user-47=tigerlet user-48=nomistakes
Sep 26 13:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=hidden user-50=leftie user-51=foods user-52=fortunaz user-53=health2045 user-54=nscdp user-55=steakbridieme user-56=donnychicago user-57=firstre5 user-58=philmcph user-59=ctedorgu user-60=lkpier user-61=darkstar user-62=eatspam user-63=beauty user-64=dhyana user-65=fawcettd user-66=burydropin user-67=nsceres user-68=zebrapho user-69=bwppodcast user-70=steve user-71=sibtoncc user-72=asandcoc user-73=stuartge user-74=askhform user-75=innovat1 user-76=nativene user-77=alexadmin user-78=skyfirec user-79=bedfords user-80=bemadonn user-81=newstoda user-82=belle user-83=ggaaorgu user-84=nstriton user-85=brighto1 user-86=oneoarco user-87=battlere user-88=vivienn1 user-89=firstre2 user-90=ianrayne user-91=accooper user-92=thqkgnbz user-93=connectedshoppin user-94=elecleis user-95=milloyco user-96=gilpin user-97=fetch user-98=carsinyo user-99=hubmaster user-100=costestimatorco user-101=firstrel user-102=clarkass
Sep 26 13:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=highlegh user-104=southlon user-105=firstred user-106=firstres user-107=ultbcrra user-108=seftvta user-109=jonhartl user-110=coursemc user-111=opaiscyx user-112=hhdugcor user-113=lbhyisi user-114=magichat user-115=martsblo user-116=ptkxhsbt user-117=dickemery123 user-118=wilsonsw user-119=megacards user-120=musorguk user-121=lakesan1 user-122=brmrjxl user-123=atestord user-124=sarafoundation user-125=strathar user-126=agproduc user-127=still user-128=leereyn1 user-129=stephani user-130=jarvisin user-131=theblack user-132=hodgesonweb user-133=spectrum user-134=ulsukarm user-135=foundation user-136=booff user-137=markward user-138=lbscrmod user-139=maflemin user-140=vantagep user-141=connect9 user-142=athenare feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 13:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 13:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:11 nativespace-cdp sudo[29831]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 13:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:11 nativespace-cdp sudo[29837]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GCqNh2eOH5pYqdjk.~
Sep 26 13:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:11 nativespace-cdp sudo[29841]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GCqNh2eOH5pYqdjk.~'
Sep 26 13:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:11 nativespace-cdp sudo[29844]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GCqNh2eOH5pYqdjk.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 13:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:11 nativespace-cdp sudo[29848]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 13:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:11 nativespace-cdp sudo[29851]: pam_unix(sudo:session): session closed for user root
Sep 26 13:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 13:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 13:10:31 nativespace-cdp sudo[29925]: pam_unix(sudo:session): session closed for user root
Sep 26 13:11:33 nativespace-cdp sshd[30209]: Connection closed by 159.100.136.21 port 40722 [preauth]
Sep 26 13:16:33 nativespace-cdp sshd[31854]: Connection closed by 159.100.136.21 port 50102 [preauth]
Sep 26 13:21:33 nativespace-cdp sshd[1659]: Connection closed by 159.100.136.21 port 59402 [preauth]
Sep 26 13:26:33 nativespace-cdp sshd[3741]: Connection closed by 159.100.136.21 port 40852 [preauth]
Sep 26 13:33:12 nativespace-cdp sshd[7730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.235.2  user=root
Sep 26 13:33:12 nativespace-cdp sshd[7730]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 26 13:33:14 nativespace-cdp sshd[7730]: Failed password for root from 27.254.235.2 port 49114 ssh2
Sep 26 13:33:16 nativespace-cdp sshd[7730]: Received disconnect from 27.254.235.2 port 49114:11: Bye Bye [preauth]
Sep 26 13:33:16 nativespace-cdp sshd[7730]: Disconnected from 27.254.235.2 port 49114 [preauth]
Sep 26 13:36:34 nativespace-cdp sshd[9550]: Connection closed by 159.100.136.21 port 59052 [preauth]
Sep 26 13:36:52 nativespace-cdp sshd[9622]: Invalid user adminftp from 27.254.235.2 port 56092
Sep 26 13:36:52 nativespace-cdp sshd[9622]: input_userauth_request: invalid user adminftp [preauth]
Sep 26 13:36:52 nativespace-cdp sshd[9622]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 13:36:52 nativespace-cdp sshd[9622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.235.2
Sep 26 13:36:54 nativespace-cdp sshd[9622]: Failed password for invalid user adminftp from 27.254.235.2 port 56092 ssh2
Sep 26 13:36:54 nativespace-cdp sshd[9622]: Received disconnect from 27.254.235.2 port 56092:11: Bye Bye [preauth]
Sep 26 13:36:54 nativespace-cdp sshd[9622]: Disconnected from 27.254.235.2 port 56092 [preauth]
Sep 26 13:37:42 nativespace-cdp sshd[9939]: Invalid user anand from 27.254.235.2 port 40252
Sep 26 13:37:42 nativespace-cdp sshd[9939]: input_userauth_request: invalid user anand [preauth]
Sep 26 13:37:42 nativespace-cdp sshd[9939]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 13:37:42 nativespace-cdp sshd[9939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.235.2
Sep 26 13:37:43 nativespace-cdp sshd[9939]: Failed password for invalid user anand from 27.254.235.2 port 40252 ssh2
Sep 26 13:37:44 nativespace-cdp sshd[9939]: Received disconnect from 27.254.235.2 port 40252:11: Bye Bye [preauth]
Sep 26 13:37:44 nativespace-cdp sshd[9939]: Disconnected from 27.254.235.2 port 40252 [preauth]
Sep 26 13:41:33 nativespace-cdp sshd[12190]: Connection closed by 159.100.136.21 port 40386 [preauth]
Sep 26 13:46:33 nativespace-cdp sshd[14080]: Connection closed by 159.100.136.21 port 49572 [preauth]
Sep 26 13:51:33 nativespace-cdp sshd[15557]: Connection closed by 159.100.136.21 port 58314 [preauth]
Sep 26 13:56:33 nativespace-cdp sshd[16700]: Connection closed by 159.100.136.21 port 38994 [preauth]
Sep 26 14:01:15 nativespace-cdp sshd[18319]: Bad protocol version identification '\003' from 91.238.181.34 port 65131
Sep 26 14:01:33 nativespace-cdp sshd[18377]: Connection closed by 159.100.136.21 port 48558 [preauth]
Sep 26 14:06:34 nativespace-cdp sshd[19636]: Connection closed by 159.100.136.21 port 58238 [preauth]
Sep 26 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:09:58 nativespace-cdp sudo[20524]: pam_unix(sudo:session): session closed for user root
Sep 26 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:09:58 nativespace-cdp sudo[20527]: pam_unix(sudo:session): session closed for user root
Sep 26 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:09:59 nativespace-cdp sudo[20530]: pam_unix(sudo:session): session closed for user root
Sep 26 14:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 14:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:09:59 nativespace-cdp sudo[20538]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:05 nativespace-cdp sudo[20541]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 14:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:05 nativespace-cdp sudo[20710]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 14:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:05 nativespace-cdp sudo[20714]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 14:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:05 nativespace-cdp sudo[20717]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 14:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:05 nativespace-cdp sudo[20720]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 14:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:05 nativespace-cdp sudo[20723]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 14:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:05 nativespace-cdp sudo[20727]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 14:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:08 nativespace-cdp sudo[20739]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 14:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:09 nativespace-cdp sudo[20747]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=lkpier user-2=philmcph user-3=ctedorgu user-4=donnychicago user-5=steakbridieme user-6=firstre5 user-7=nscdp user-8=fortunaz user-9=health2045 user-10=leftie user-11=foods user-12=hidden user-13=nomistakes user-14=tigerlet user-15=barbersh user-16=isleofwi user-17=smrszyqg user-18=pugwash user-19=paulmca1 user-20=howardon user-21=cwsocial user-22=cathski user-23=cambria1 user-24=reliable user-25=ninejimm user-26=eugincou user-27=courseme user-28=hirefootballgame user-29=sibtoncc user-30=asandcoc user-31=steve user-32=bwppodcast user-33=zebrapho user-34=nsceres user-35=burydropin user-36=fawcettd user-37=dhyana user-38=beauty user-39=eatspam user-40=darkstar user-41=boldover user-42=nove user-43=bakery user-44=sosevalu user-45=crrtipdl user-46=cath user-47=sketchy user-48=havantho user-49=nvihkvu
Sep 26 14:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=oubpgvbx user-51=tstardom user-52=what user-53=design user-54=ladburyp user-55=dancinggardener user-56=stagingerris user-57=kategilpin user-58=jennimil user-59=tomandle user-60=careers user-61=nbhavers user-62=david user-63=chrisdal user-64=mcdermos user-65=onlycont user-66=attlebor user-67=lucy user-68=romaldki user-69=hodgsonmail user-70=ranxterc user-71=outdoorc user-72=branko user-73=strathar user-74=sarafoundation user-75=atestord user-76=lakesan1 user-77=brmrjxl user-78=musorguk user-79=megacards user-80=wilsonsw user-81=dickemery123 user-82=ptkxhsbt user-83=martsblo user-84=magichat user-85=lbhyisi user-86=hhdugcor user-87=connect9 user-88=athenare user-89=vantagep user-90=maflemin user-91=lbscrmod user-92=markward user-93=booff user-94=foundation user-95=ulsukarm user-96=spectrum user-97=hodgesonweb user-98=theblack user-99=jarvisin user-100=stephani user-101=leereyn1 user-102=still
Sep 26 14:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=agproduc user-104=firstre2 user-105=vivienn1 user-106=battlere user-107=oneoarco user-108=brighto1 user-109=nstriton user-110=belle user-111=ggaaorgu user-112=newstoda user-113=bemadonn user-114=bedfords user-115=alexadmin user-116=skyfirec user-117=nativene user-118=innovat1 user-119=stuartge user-120=askhform user-121=opaiscyx user-122=coursemc user-123=seftvta user-124=jonhartl user-125=ultbcrra user-126=firstres user-127=firstred user-128=southlon user-129=highlegh user-130=firstrel user-131=clarkass user-132=costestimatorco user-133=hubmaster user-134=carsinyo user-135=fetch user-136=gilpin user-137=milloyco user-138=elecleis user-139=connectedshoppin user-140=thqkgnbz user-141=accooper user-142=ianrayne feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 14:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 14:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:11 nativespace-cdp sudo[20812]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:12 nativespace-cdp sudo[20825]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NQBujorlDHeDbD9M.~
Sep 26 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:12 nativespace-cdp sudo[20828]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NQBujorlDHeDbD9M.~'
Sep 26 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:12 nativespace-cdp sudo[20831]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NQBujorlDHeDbD9M.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:12 nativespace-cdp sudo[20835]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:12 nativespace-cdp sudo[20839]: pam_unix(sudo:session): session closed for user root
Sep 26 14:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 14:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 14:10:25 nativespace-cdp sudo[20913]: pam_unix(sudo:session): session closed for user root
Sep 26 14:11:36 nativespace-cdp sshd[21122]: Connection closed by 159.100.136.21 port 39466 [preauth]
Sep 26 14:16:33 nativespace-cdp sshd[22757]: Connection closed by 159.100.136.21 port 49360 [preauth]
Sep 26 14:21:33 nativespace-cdp sshd[24180]: Connection closed by 159.100.136.21 port 59090 [preauth]
Sep 26 14:26:33 nativespace-cdp sshd[25541]: Connection closed by 159.100.136.21 port 40526 [preauth]
Sep 26 14:31:33 nativespace-cdp sshd[27175]: Connection closed by 159.100.136.21 port 50132 [preauth]
Sep 26 14:35:45 nativespace-cdp sshd[28118]: Invalid user usuario from 85.50.226.36 port 46608
Sep 26 14:35:45 nativespace-cdp sshd[28118]: input_userauth_request: invalid user usuario [preauth]
Sep 26 14:35:45 nativespace-cdp sshd[28118]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:35:45 nativespace-cdp sshd[28118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.50.226.36
Sep 26 14:35:47 nativespace-cdp sshd[28118]: Failed password for invalid user usuario from 85.50.226.36 port 46608 ssh2
Sep 26 14:35:47 nativespace-cdp sshd[28118]: Received disconnect from 85.50.226.36 port 46608:11: Bye Bye [preauth]
Sep 26 14:35:47 nativespace-cdp sshd[28118]: Disconnected from 85.50.226.36 port 46608 [preauth]
Sep 26 14:35:58 nativespace-cdp sshd[28246]: Invalid user ubuntu from 36.66.16.233 port 59502
Sep 26 14:35:58 nativespace-cdp sshd[28246]: input_userauth_request: invalid user ubuntu [preauth]
Sep 26 14:35:58 nativespace-cdp sshd[28246]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:35:58 nativespace-cdp sshd[28246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.16.233
Sep 26 14:36:00 nativespace-cdp sshd[28246]: Failed password for invalid user ubuntu from 36.66.16.233 port 59502 ssh2
Sep 26 14:36:00 nativespace-cdp sshd[28246]: Received disconnect from 36.66.16.233 port 59502:11: Bye Bye [preauth]
Sep 26 14:36:00 nativespace-cdp sshd[28246]: Disconnected from 36.66.16.233 port 59502 [preauth]
Sep 26 14:36:05 nativespace-cdp sshd[28276]: Invalid user usuario from 34.29.120.92 port 56050
Sep 26 14:36:05 nativespace-cdp sshd[28276]: input_userauth_request: invalid user usuario [preauth]
Sep 26 14:36:05 nativespace-cdp sshd[28276]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:36:05 nativespace-cdp sshd[28276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.29.120.92
Sep 26 14:36:07 nativespace-cdp sshd[28276]: Failed password for invalid user usuario from 34.29.120.92 port 56050 ssh2
Sep 26 14:36:08 nativespace-cdp sshd[28276]: Received disconnect from 34.29.120.92 port 56050:11: Bye Bye [preauth]
Sep 26 14:36:08 nativespace-cdp sshd[28276]: Disconnected from 34.29.120.92 port 56050 [preauth]
Sep 26 14:36:33 nativespace-cdp sshd[28375]: Connection closed by 159.100.136.21 port 59982 [preauth]
Sep 26 14:36:33 nativespace-cdp sshd[28372]: Invalid user tuan from 45.175.75.60 port 54838
Sep 26 14:36:33 nativespace-cdp sshd[28372]: input_userauth_request: invalid user tuan [preauth]
Sep 26 14:36:33 nativespace-cdp sshd[28372]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:36:33 nativespace-cdp sshd[28372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.175.75.60
Sep 26 14:36:35 nativespace-cdp sshd[28372]: Failed password for invalid user tuan from 45.175.75.60 port 54838 ssh2
Sep 26 14:36:35 nativespace-cdp sshd[28372]: Received disconnect from 45.175.75.60 port 54838:11: Bye Bye [preauth]
Sep 26 14:36:35 nativespace-cdp sshd[28372]: Disconnected from 45.175.75.60 port 54838 [preauth]
Sep 26 14:41:49 nativespace-cdp sshd[29562]: Invalid user abhishek from 146.59.127.25 port 53066
Sep 26 14:41:49 nativespace-cdp sshd[29562]: input_userauth_request: invalid user abhishek [preauth]
Sep 26 14:41:49 nativespace-cdp sshd[29562]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:41:49 nativespace-cdp sshd[29562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.59.127.25
Sep 26 14:41:50 nativespace-cdp sshd[29562]: Failed password for invalid user abhishek from 146.59.127.25 port 53066 ssh2
Sep 26 14:41:50 nativespace-cdp sshd[29562]: Received disconnect from 146.59.127.25 port 53066:11: Bye Bye [preauth]
Sep 26 14:41:50 nativespace-cdp sshd[29562]: Disconnected from 146.59.127.25 port 53066 [preauth]
Sep 26 14:42:11 nativespace-cdp sshd[29624]: Invalid user ubuntu from 34.29.120.92 port 33128
Sep 26 14:42:11 nativespace-cdp sshd[29624]: input_userauth_request: invalid user ubuntu [preauth]
Sep 26 14:42:11 nativespace-cdp sshd[29624]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:42:11 nativespace-cdp sshd[29624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.29.120.92
Sep 26 14:42:12 nativespace-cdp sshd[29624]: Failed password for invalid user ubuntu from 34.29.120.92 port 33128 ssh2
Sep 26 14:42:13 nativespace-cdp sshd[29624]: Received disconnect from 34.29.120.92 port 33128:11: Bye Bye [preauth]
Sep 26 14:42:13 nativespace-cdp sshd[29624]: Disconnected from 34.29.120.92 port 33128 [preauth]
Sep 26 14:42:38 nativespace-cdp sshd[29703]: Invalid user test from 146.59.127.25 port 54964
Sep 26 14:42:38 nativespace-cdp sshd[29703]: input_userauth_request: invalid user test [preauth]
Sep 26 14:42:38 nativespace-cdp sshd[29703]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:42:38 nativespace-cdp sshd[29703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.59.127.25
Sep 26 14:42:40 nativespace-cdp sshd[29703]: Failed password for invalid user test from 146.59.127.25 port 54964 ssh2
Sep 26 14:42:40 nativespace-cdp sshd[29703]: Received disconnect from 146.59.127.25 port 54964:11: Bye Bye [preauth]
Sep 26 14:42:40 nativespace-cdp sshd[29703]: Disconnected from 146.59.127.25 port 54964 [preauth]
Sep 26 14:42:56 nativespace-cdp sshd[29740]: Invalid user user from 34.29.120.92 port 48420
Sep 26 14:42:56 nativespace-cdp sshd[29740]: input_userauth_request: invalid user user [preauth]
Sep 26 14:42:56 nativespace-cdp sshd[29740]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:42:56 nativespace-cdp sshd[29740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.29.120.92
Sep 26 14:42:58 nativespace-cdp sshd[29740]: Failed password for invalid user user from 34.29.120.92 port 48420 ssh2
Sep 26 14:42:58 nativespace-cdp sshd[29740]: Received disconnect from 34.29.120.92 port 48420:11: Bye Bye [preauth]
Sep 26 14:42:58 nativespace-cdp sshd[29740]: Disconnected from 34.29.120.92 port 48420 [preauth]
Sep 26 14:43:23 nativespace-cdp sshd[29870]: Invalid user ubuntu from 146.59.127.25 port 34416
Sep 26 14:43:23 nativespace-cdp sshd[29870]: input_userauth_request: invalid user ubuntu [preauth]
Sep 26 14:43:23 nativespace-cdp sshd[29870]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:43:23 nativespace-cdp sshd[29870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.59.127.25
Sep 26 14:43:25 nativespace-cdp sshd[29870]: Failed password for invalid user ubuntu from 146.59.127.25 port 34416 ssh2
Sep 26 14:43:25 nativespace-cdp sshd[29870]: Received disconnect from 146.59.127.25 port 34416:11: Bye Bye [preauth]
Sep 26 14:43:25 nativespace-cdp sshd[29870]: Disconnected from 146.59.127.25 port 34416 [preauth]
Sep 26 14:43:59 nativespace-cdp sshd[30077]: Invalid user test_user from 36.66.16.233 port 33566
Sep 26 14:43:59 nativespace-cdp sshd[30077]: input_userauth_request: invalid user test_user [preauth]
Sep 26 14:43:59 nativespace-cdp sshd[30077]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:43:59 nativespace-cdp sshd[30077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.16.233
Sep 26 14:44:01 nativespace-cdp sshd[30077]: Failed password for invalid user test_user from 36.66.16.233 port 33566 ssh2
Sep 26 14:44:01 nativespace-cdp sshd[30077]: Received disconnect from 36.66.16.233 port 33566:11: Bye Bye [preauth]
Sep 26 14:44:01 nativespace-cdp sshd[30077]: Disconnected from 36.66.16.233 port 33566 [preauth]
Sep 26 14:44:52 nativespace-cdp sshd[30610]: Invalid user test from 36.66.16.233 port 48276
Sep 26 14:44:52 nativespace-cdp sshd[30610]: input_userauth_request: invalid user test [preauth]
Sep 26 14:44:52 nativespace-cdp sshd[30610]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 14:44:52 nativespace-cdp sshd[30610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.16.233
Sep 26 14:44:55 nativespace-cdp sshd[30610]: Failed password for invalid user test from 36.66.16.233 port 48276 ssh2
Sep 26 14:44:55 nativespace-cdp sshd[30610]: Received disconnect from 36.66.16.233 port 48276:11: Bye Bye [preauth]
Sep 26 14:44:55 nativespace-cdp sshd[30610]: Disconnected from 36.66.16.233 port 48276 [preauth]
Sep 26 14:46:33 nativespace-cdp sshd[31107]: Connection closed by 159.100.136.21 port 49866 [preauth]
Sep 26 14:51:33 nativespace-cdp sshd[32449]: Connection closed by 159.100.136.21 port 59464 [preauth]
Sep 26 14:56:34 nativespace-cdp sshd[1143]: Connection closed by 159.100.136.21 port 40782 [preauth]
Sep 26 15:01:33 nativespace-cdp sshd[2508]: Connection closed by 159.100.136.21 port 49130 [preauth]
Sep 26 15:06:02 nativespace-cdp sshd[3874]: Invalid user test from 85.50.226.36 port 44194
Sep 26 15:06:02 nativespace-cdp sshd[3874]: input_userauth_request: invalid user test [preauth]
Sep 26 15:06:02 nativespace-cdp sshd[3874]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 15:06:02 nativespace-cdp sshd[3874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.50.226.36
Sep 26 15:06:03 nativespace-cdp sshd[3874]: Failed password for invalid user test from 85.50.226.36 port 44194 ssh2
Sep 26 15:06:03 nativespace-cdp sshd[3874]: Received disconnect from 85.50.226.36 port 44194:11: Bye Bye [preauth]
Sep 26 15:06:03 nativespace-cdp sshd[3874]: Disconnected from 85.50.226.36 port 44194 [preauth]
Sep 26 15:06:29 nativespace-cdp sshd[4045]: Invalid user test from 85.50.226.36 port 46458
Sep 26 15:06:29 nativespace-cdp sshd[4045]: input_userauth_request: invalid user test [preauth]
Sep 26 15:06:29 nativespace-cdp sshd[4045]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 15:06:29 nativespace-cdp sshd[4045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.50.226.36
Sep 26 15:06:32 nativespace-cdp sshd[4045]: Failed password for invalid user test from 85.50.226.36 port 46458 ssh2
Sep 26 15:06:32 nativespace-cdp sshd[4045]: Received disconnect from 85.50.226.36 port 46458:11: Bye Bye [preauth]
Sep 26 15:06:32 nativespace-cdp sshd[4045]: Disconnected from 85.50.226.36 port 46458 [preauth]
Sep 26 15:06:33 nativespace-cdp sshd[4063]: Connection closed by 159.100.136.21 port 58736 [preauth]
Sep 26 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:09:57 nativespace-cdp sudo[4822]: pam_unix(sudo:session): session closed for user root
Sep 26 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:09:57 nativespace-cdp sudo[4833]: pam_unix(sudo:session): session closed for user root
Sep 26 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:09:59 nativespace-cdp sudo[4838]: pam_unix(sudo:session): session closed for user root
Sep 26 15:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 15:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:09:59 nativespace-cdp sudo[4863]: pam_unix(sudo:session): session closed for user root
Sep 26 15:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 15:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:02 nativespace-cdp sudo[4867]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:02 nativespace-cdp sudo[4960]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:02 nativespace-cdp sudo[4969]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:02 nativespace-cdp sudo[4972]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:02 nativespace-cdp sudo[4975]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:02 nativespace-cdp sudo[4978]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 15:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:02 nativespace-cdp sudo[4982]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 15:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:08 nativespace-cdp sudo[5037]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 15:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:09 nativespace-cdp sudo[5042]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstred user-2=highlegh user-3=southlon user-4=clarkass user-5=firstrel user-6=costestimatorco user-7=coursemc user-8=opaiscyx user-9=ultbcrra user-10=jonhartl user-11=seftvta user-12=firstres user-13=connectedshoppin user-14=thqkgnbz user-15=accooper user-16=ianrayne user-17=hubmaster user-18=fetch user-19=carsinyo user-20=gilpin user-21=milloyco user-22=elecleis user-23=newstoda user-24=belle user-25=ggaaorgu user-26=bemadonn user-27=bedfords user-28=vivienn1 user-29=firstre2 user-30=oneoarco user-31=battlere user-32=nstriton user-33=brighto1 user-34=nativene user-35=innovat1 user-36=askhform user-37=stuartge user-38=skyfirec user-39=alexadmin user-40=ulsukarm user-41=vantagep user-42=athenare user-43=connect9 user-44=lbscrmod user-45=maflemin user-46=markward user-47=booff user-48=foundation
Sep 26 15:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=stephani user-50=leereyn1 user-51=agproduc user-52=still user-53=spectrum user-54=theblack user-55=hodgesonweb user-56=jarvisin user-57=megacards user-58=musorguk user-59=wilsonsw user-60=strathar user-61=atestord user-62=sarafoundation user-63=lakesan1 user-64=brmrjxl user-65=magichat user-66=hhdugcor user-67=lbhyisi user-68=dickemery123 user-69=ptkxhsbt user-70=martsblo user-71=david user-72=nbhavers user-73=careers user-74=chrisdal user-75=mcdermos user-76=jennimil user-77=tomandle user-78=romaldki user-79=hodgsonmail user-80=outdoorc user-81=ranxterc user-82=branko user-83=onlycont user-84=lucy user-85=attlebor user-86=bakery user-87=crrtipdl user-88=sosevalu user-89=boldover user-90=nove user-91=design user-92=dancinggardener user-93=stagingerris user-94=ladburyp user-95=kategilpin user-96=havantho user-97=sketchy user-98=cath user-99=nvihkvu user-100=tstardom user-101=oubpgvbx user-102=what
Sep 26 15:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=steve user-104=bwppodcast user-105=zebrapho user-106=sibtoncc user-107=asandcoc user-108=dhyana user-109=beauty user-110=darkstar user-111=eatspam user-112=nsceres user-113=fawcettd user-114=burydropin user-115=nomistakes user-116=hidden user-117=tigerlet user-118=barbersh user-119=smrszyqg user-120=isleofwi user-121=lkpier user-122=steakbridieme user-123=donnychicago user-124=firstre5 user-125=philmcph user-126=ctedorgu user-127=nscdp user-128=foods user-129=leftie user-130=fortunaz user-131=health2045 user-132=eugincou user-133=courseme user-134=hirefootballgame user-135=cwsocial user-136=pugwash user-137=howardon user-138=paulmca1 user-139=cambria1 user-140=cathski user-141=reliable user-142=ninejimm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 15:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 15:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:10 nativespace-cdp sudo[5049]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 15:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:11 nativespace-cdp sudo[5055]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-X5ltUmtcxNeRAhkj.~
Sep 26 15:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:11 nativespace-cdp sudo[5058]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-X5ltUmtcxNeRAhkj.~'
Sep 26 15:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:11 nativespace-cdp sudo[5061]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-X5ltUmtcxNeRAhkj.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 15:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:11 nativespace-cdp sudo[5066]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 15:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:11 nativespace-cdp sudo[5069]: pam_unix(sudo:session): session closed for user root
Sep 26 15:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 15:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 15:10:13 nativespace-cdp sudo[5089]: pam_unix(sudo:session): session closed for user root
Sep 26 15:11:34 nativespace-cdp sshd[5397]: Connection closed by 159.100.136.21 port 39972 [preauth]
Sep 26 15:16:33 nativespace-cdp sshd[7006]: Connection closed by 159.100.136.21 port 49554 [preauth]
Sep 26 15:21:33 nativespace-cdp sshd[8226]: Connection closed by 159.100.136.21 port 59118 [preauth]
Sep 26 15:26:33 nativespace-cdp sshd[9476]: Connection closed by 159.100.136.21 port 40520 [preauth]
Sep 26 15:31:35 nativespace-cdp sshd[10771]: Connection closed by 159.100.136.21 port 50178 [preauth]
Sep 26 15:36:33 nativespace-cdp sshd[12304]: Connection closed by 159.100.136.21 port 59858 [preauth]
Sep 26 15:41:33 nativespace-cdp sshd[13690]: Connection closed by 159.100.136.21 port 40110 [preauth]
Sep 26 15:44:51 nativespace-cdp sshd[14633]: Invalid user ubuntu from 143.198.146.239 port 60388
Sep 26 15:44:51 nativespace-cdp sshd[14633]: input_userauth_request: invalid user ubuntu [preauth]
Sep 26 15:44:51 nativespace-cdp sshd[14633]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 15:44:51 nativespace-cdp sshd[14633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.146.239
Sep 26 15:44:51 nativespace-cdp sshd[14639]: Invalid user tomcat from 34.84.82.194 port 40320
Sep 26 15:44:51 nativespace-cdp sshd[14639]: input_userauth_request: invalid user tomcat [preauth]
Sep 26 15:44:51 nativespace-cdp sshd[14639]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 15:44:51 nativespace-cdp sshd[14639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.84.82.194
Sep 26 15:44:53 nativespace-cdp sshd[14633]: Failed password for invalid user ubuntu from 143.198.146.239 port 60388 ssh2
Sep 26 15:44:53 nativespace-cdp sshd[14633]: Received disconnect from 143.198.146.239 port 60388:11: Bye Bye [preauth]
Sep 26 15:44:53 nativespace-cdp sshd[14633]: Disconnected from 143.198.146.239 port 60388 [preauth]
Sep 26 15:44:53 nativespace-cdp sshd[14639]: Failed password for invalid user tomcat from 34.84.82.194 port 40320 ssh2
Sep 26 15:44:53 nativespace-cdp sshd[14639]: Received disconnect from 34.84.82.194 port 40320:11: Bye Bye [preauth]
Sep 26 15:44:53 nativespace-cdp sshd[14639]: Disconnected from 34.84.82.194 port 40320 [preauth]
Sep 26 15:46:34 nativespace-cdp sshd[15213]: Connection closed by 159.100.136.21 port 49010 [preauth]
Sep 26 15:49:52 nativespace-cdp sshd[15994]: Invalid user tomcat from 143.198.146.239 port 34838
Sep 26 15:49:52 nativespace-cdp sshd[15994]: input_userauth_request: invalid user tomcat [preauth]
Sep 26 15:49:52 nativespace-cdp sshd[15994]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 15:49:52 nativespace-cdp sshd[15994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.146.239
Sep 26 15:49:55 nativespace-cdp sshd[15994]: Failed password for invalid user tomcat from 143.198.146.239 port 34838 ssh2
Sep 26 15:49:55 nativespace-cdp sshd[15994]: Received disconnect from 143.198.146.239 port 34838:11: Bye Bye [preauth]
Sep 26 15:49:55 nativespace-cdp sshd[15994]: Disconnected from 143.198.146.239 port 34838 [preauth]
Sep 26 15:50:24 nativespace-cdp sshd[16302]: Invalid user test from 34.84.82.194 port 46814
Sep 26 15:50:24 nativespace-cdp sshd[16302]: input_userauth_request: invalid user test [preauth]
Sep 26 15:50:24 nativespace-cdp sshd[16302]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 15:50:24 nativespace-cdp sshd[16302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.84.82.194
Sep 26 15:50:27 nativespace-cdp sshd[16302]: Failed password for invalid user test from 34.84.82.194 port 46814 ssh2
Sep 26 15:50:27 nativespace-cdp sshd[16302]: Received disconnect from 34.84.82.194 port 46814:11: Bye Bye [preauth]
Sep 26 15:50:27 nativespace-cdp sshd[16302]: Disconnected from 34.84.82.194 port 46814 [preauth]
Sep 26 15:50:35 nativespace-cdp sshd[16380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.146.239  user=root
Sep 26 15:50:35 nativespace-cdp sshd[16380]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 26 15:50:37 nativespace-cdp sshd[16380]: Failed password for root from 143.198.146.239 port 55792 ssh2
Sep 26 15:51:09 nativespace-cdp sshd[16517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.84.82.194  user=root
Sep 26 15:51:09 nativespace-cdp sshd[16517]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 26 15:51:11 nativespace-cdp sshd[16517]: Failed password for root from 34.84.82.194 port 33202 ssh2
Sep 26 15:51:11 nativespace-cdp sshd[16517]: Received disconnect from 34.84.82.194 port 33202:11: Bye Bye [preauth]
Sep 26 15:51:11 nativespace-cdp sshd[16517]: Disconnected from 34.84.82.194 port 33202 [preauth]
Sep 26 15:51:33 nativespace-cdp sshd[16677]: Connection closed by 159.100.136.21 port 57776 [preauth]
Sep 26 16:01:33 nativespace-cdp sshd[19578]: Connection closed by 159.100.136.21 port 48412 [preauth]
Sep 26 16:06:36 nativespace-cdp sshd[20936]: Connection closed by 159.100.136.21 port 57454 [preauth]
Sep 26 16:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 16:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:01 nativespace-cdp sudo[21530]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 16:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:01 nativespace-cdp sudo[21609]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 16:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:04 nativespace-cdp sudo[21614]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 16:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:04 nativespace-cdp sudo[21661]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 16:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:10 nativespace-cdp sudo[21664]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 16:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:11 nativespace-cdp sudo[21693]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 16:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:11 nativespace-cdp sudo[21698]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 16:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:11 nativespace-cdp sudo[21701]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 16:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:11 nativespace-cdp sudo[21704]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 16:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:11 nativespace-cdp sudo[21707]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 16:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:11 nativespace-cdp sudo[21710]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 16:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:14 nativespace-cdp sudo[21727]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 16:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:15 nativespace-cdp sudo[21735]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=costestimatorco user-2=clarkass user-3=firstrel user-4=highlegh user-5=southlon user-6=firstred user-7=firstres user-8=ultbcrra user-9=seftvta user-10=jonhartl user-11=opaiscyx user-12=coursemc user-13=ianrayne user-14=accooper user-15=thqkgnbz user-16=connectedshoppin user-17=elecleis user-18=gilpin user-19=milloyco user-20=fetch user-21=carsinyo user-22=hubmaster user-23=bedfords user-24=bemadonn user-25=newstoda user-26=ggaaorgu user-27=belle user-28=nstriton user-29=brighto1 user-30=oneoarco user-31=battlere user-32=vivienn1 user-33=firstre2 user-34=stuartge user-35=askhform user-36=innovat1 user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=booff user-42=foundation user-43=markward user-44=lbscrmod user-45=maflemin user-46=vantagep user-47=athenare user-48=connect9
Sep 26 16:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=agproduc user-50=still user-51=leereyn1 user-52=stephani user-53=jarvisin user-54=theblack user-55=hodgesonweb user-56=spectrum user-57=wilsonsw user-58=megacards user-59=musorguk user-60=lakesan1 user-61=brmrjxl user-62=atestord user-63=sarafoundation user-64=strathar user-65=hhdugcor user-66=lbhyisi user-67=magichat user-68=martsblo user-69=ptkxhsbt user-70=dickemery123 user-71=mcdermos user-72=chrisdal user-73=david user-74=careers user-75=nbhavers user-76=tomandle user-77=jennimil user-78=branko user-79=ranxterc user-80=hodgsonmail user-81=outdoorc user-82=romaldki user-83=lucy user-84=attlebor user-85=onlycont user-86=crrtipdl user-87=sosevalu user-88=bakery user-89=nove user-90=boldover user-91=kategilpin user-92=stagingerris user-93=dancinggardener user-94=ladburyp user-95=design user-96=what user-97=tstardom user-98=oubpgvbx user-99=nvihkvu user-100=havantho user-101=sketchy user-102=cath
Sep 26 16:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=zebrapho user-104=bwppodcast user-105=steve user-106=sibtoncc user-107=asandcoc user-108=darkstar user-109=eatspam user-110=beauty user-111=dhyana user-112=fawcettd user-113=burydropin user-114=nsceres user-115=isleofwi user-116=smrszyqg user-117=barbersh user-118=tigerlet user-119=nomistakes user-120=hidden user-121=foods user-122=leftie user-123=fortunaz user-124=health2045 user-125=nscdp user-126=firstre5 user-127=steakbridieme user-128=donnychicago user-129=philmcph user-130=ctedorgu user-131=lkpier user-132=hirefootballgame user-133=courseme user-134=eugincou user-135=reliable user-136=ninejimm user-137=cathski user-138=cambria1 user-139=cwsocial user-140=paulmca1 user-141=howardon user-142=pugwash feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 16:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:17 nativespace-cdp sudo[21742]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 16:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:18 nativespace-cdp sudo[21760]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-39AmNosXggMPrQTa.~
Sep 26 16:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:19 nativespace-cdp sudo[21763]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-39AmNosXggMPrQTa.~'
Sep 26 16:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:19 nativespace-cdp sudo[21766]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-39AmNosXggMPrQTa.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 16:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:19 nativespace-cdp sudo[21771]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 16:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:19 nativespace-cdp sudo[21776]: pam_unix(sudo:session): session closed for user root
Sep 26 16:10:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 16:10:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 16:10:44 nativespace-cdp sudo[21967]: pam_unix(sudo:session): session closed for user root
Sep 26 16:11:34 nativespace-cdp sshd[22171]: Connection closed by 159.100.136.21 port 38696 [preauth]
Sep 26 16:16:34 nativespace-cdp sshd[23756]: Connection closed by 159.100.136.21 port 47738 [preauth]
Sep 26 16:21:33 nativespace-cdp sshd[24872]: Connection closed by 159.100.136.21 port 57064 [preauth]
Sep 26 16:26:35 nativespace-cdp sshd[25953]: Connection closed by 159.100.136.21 port 38302 [preauth]
Sep 26 16:31:33 nativespace-cdp sshd[27346]: Connection closed by 159.100.136.21 port 47432 [preauth]
Sep 26 16:32:59 nativespace-cdp sshd[27604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.141.222  user=root
Sep 26 16:32:59 nativespace-cdp sshd[27604]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 26 16:33:02 nativespace-cdp sshd[27604]: Failed password for root from 51.178.141.222 port 59906 ssh2
Sep 26 16:33:02 nativespace-cdp sshd[27604]: Received disconnect from 51.178.141.222 port 59906:11: Bye Bye [preauth]
Sep 26 16:33:02 nativespace-cdp sshd[27604]: Disconnected from 51.178.141.222 port 59906 [preauth]
Sep 26 16:35:56 nativespace-cdp sshd[28595]: Invalid user jeremy from 51.178.141.222 port 35164
Sep 26 16:35:56 nativespace-cdp sshd[28595]: input_userauth_request: invalid user jeremy [preauth]
Sep 26 16:35:56 nativespace-cdp sshd[28595]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 16:35:56 nativespace-cdp sshd[28595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.141.222
Sep 26 16:35:57 nativespace-cdp sshd[28595]: Failed password for invalid user jeremy from 51.178.141.222 port 35164 ssh2
Sep 26 16:35:57 nativespace-cdp sshd[28595]: Received disconnect from 51.178.141.222 port 35164:11: Bye Bye [preauth]
Sep 26 16:35:57 nativespace-cdp sshd[28595]: Disconnected from 51.178.141.222 port 35164 [preauth]
Sep 26 16:36:33 nativespace-cdp sshd[28760]: Connection closed by 159.100.136.21 port 56744 [preauth]
Sep 26 16:36:34 nativespace-cdp sshd[28763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.141.222  user=root
Sep 26 16:36:34 nativespace-cdp sshd[28763]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 26 16:36:36 nativespace-cdp sshd[28763]: Failed password for root from 51.178.141.222 port 47914 ssh2
Sep 26 16:36:36 nativespace-cdp sshd[28763]: Received disconnect from 51.178.141.222 port 47914:11: Bye Bye [preauth]
Sep 26 16:36:36 nativespace-cdp sshd[28763]: Disconnected from 51.178.141.222 port 47914 [preauth]
Sep 26 16:41:33 nativespace-cdp sshd[30039]: Connection closed by 159.100.136.21 port 38012 [preauth]
Sep 26 16:46:36 nativespace-cdp sshd[32183]: Connection closed by 159.100.136.21 port 47722 [preauth]
Sep 26 16:47:02 nativespace-cdp sshd[32374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.141.222  user=root
Sep 26 16:47:02 nativespace-cdp sshd[32374]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 26 16:47:04 nativespace-cdp sshd[32374]: Failed password for root from 51.178.141.222 port 54288 ssh2
Sep 26 16:47:04 nativespace-cdp sshd[32374]: Received disconnect from 51.178.141.222 port 54288:11: Bye Bye [preauth]
Sep 26 16:47:04 nativespace-cdp sshd[32374]: Disconnected from 51.178.141.222 port 54288 [preauth]
Sep 26 16:47:38 nativespace-cdp sshd[32477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.141.222  user=root
Sep 26 16:47:38 nativespace-cdp sshd[32477]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 26 16:47:40 nativespace-cdp sshd[32477]: Failed password for root from 51.178.141.222 port 38806 ssh2
Sep 26 16:51:33 nativespace-cdp sshd[1172]: Connection closed by 159.100.136.21 port 56924 [preauth]
Sep 26 16:56:33 nativespace-cdp sshd[2184]: Connection closed by 159.100.136.21 port 38618 [preauth]
Sep 26 17:01:34 nativespace-cdp sshd[3741]: Connection closed by 159.100.136.21 port 48214 [preauth]
Sep 26 17:06:36 nativespace-cdp sshd[5086]: Connection closed by 159.100.136.21 port 57672 [preauth]
Sep 26 17:06:59 nativespace-cdp sshd[5173]: Invalid user admin from 103.147.159.91 port 41312
Sep 26 17:06:59 nativespace-cdp sshd[5173]: input_userauth_request: invalid user admin [preauth]
Sep 26 17:06:59 nativespace-cdp sshd[5173]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 17:06:59 nativespace-cdp sshd[5173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.147.159.91
Sep 26 17:07:01 nativespace-cdp sshd[5173]: Failed password for invalid user admin from 103.147.159.91 port 41312 ssh2
Sep 26 17:07:01 nativespace-cdp sshd[5173]: Received disconnect from 103.147.159.91 port 41312:11: Bye Bye [preauth]
Sep 26 17:07:01 nativespace-cdp sshd[5173]: Disconnected from 103.147.159.91 port 41312 [preauth]
Sep 26 17:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 17:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:09:56 nativespace-cdp sudo[5709]: pam_unix(sudo:session): session closed for user root
Sep 26 17:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 17:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:09:56 nativespace-cdp sudo[5712]: pam_unix(sudo:session): session closed for user root
Sep 26 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:09:59 nativespace-cdp sudo[5716]: pam_unix(sudo:session): session closed for user root
Sep 26 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:09:59 nativespace-cdp sudo[5728]: pam_unix(sudo:session): session closed for user root
Sep 26 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:25 nativespace-cdp sudo[5735]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 17:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:25 nativespace-cdp sudo[5931]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 17:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:25 nativespace-cdp sudo[5934]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 17:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:25 nativespace-cdp sudo[5937]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 17:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:25 nativespace-cdp sudo[5940]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 17:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:25 nativespace-cdp sudo[5943]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 17:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:25 nativespace-cdp sudo[5946]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 17:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:27 nativespace-cdp sudo[5961]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 17:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:28 nativespace-cdp sudo[5966]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=fortunaz user-2=health2045 user-3=foods user-4=leftie user-5=nscdp user-6=philmcph user-7=ctedorgu user-8=firstre5 user-9=donnychicago user-10=steakbridieme user-11=lkpier user-12=smrszyqg user-13=isleofwi user-14=barbersh user-15=tigerlet user-16=hidden user-17=nomistakes user-18=reliable user-19=ninejimm user-20=cathski user-21=cambria1 user-22=pugwash user-23=howardon user-24=paulmca1 user-25=cwsocial user-26=hirefootballgame user-27=courseme user-28=eugincou user-29=asandcoc user-30=sibtoncc user-31=zebrapho user-32=bwppodcast user-33=steve user-34=burydropin user-35=fawcettd user-36=nsceres user-37=eatspam user-38=darkstar user-39=beauty user-40=dhyana user-41=nove user-42=boldover user-43=sosevalu user-44=crrtipdl user-45=bakery user-46=what user-47=oubpgvbx user-48=tstardom
Sep 26 17:10:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=nvihkvu user-50=sketchy user-51=cath user-52=havantho user-53=kategilpin user-54=ladburyp user-55=stagingerris user-56=dancinggardener user-57=design user-58=tomandle user-59=jennimil user-60=mcdermos user-61=chrisdal user-62=careers user-63=nbhavers user-64=david user-65=attlebor user-66=lucy user-67=onlycont user-68=branko user-69=ranxterc user-70=hodgsonmail user-71=outdoorc user-72=romaldki user-73=brmrjxl user-74=lakesan1 user-75=sarafoundation user-76=atestord user-77=strathar user-78=wilsonsw user-79=musorguk user-80=megacards user-81=martsblo user-82=ptkxhsbt user-83=dickemery123 user-84=lbhyisi user-85=hhdugcor user-86=magichat user-87=booff user-88=markward user-89=foundation user-90=maflemin user-91=lbscrmod user-92=athenare user-93=connect9 user-94=vantagep user-95=ulsukarm user-96=jarvisin user-97=hodgesonweb user-98=theblack user-99=spectrum user-100=still user-101=agproduc user-102=leereyn1
Sep 26 17:10:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=stephani user-104=brighto1 user-105=nstriton user-106=battlere user-107=oneoarco user-108=firstre2 user-109=vivienn1 user-110=bedfords user-111=bemadonn user-112=ggaaorgu user-113=belle user-114=newstoda user-115=alexadmin user-116=skyfirec user-117=stuartge user-118=askhform user-119=innovat1 user-120=nativene user-121=firstres user-122=seftvta user-123=jonhartl user-124=ultbcrra user-125=coursemc user-126=opaiscyx user-127=costestimatorco user-128=clarkass user-129=firstrel user-130=southlon user-131=highlegh user-132=firstred user-133=elecleis user-134=gilpin user-135=milloyco user-136=carsinyo user-137=fetch user-138=hubmaster user-139=ianrayne user-140=accooper user-141=thqkgnbz user-142=connectedshoppin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 17:10:28 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 17:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:29 nativespace-cdp sudo[5971]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 17:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:29 nativespace-cdp sudo[5976]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YC3idSDdbe0UhcBY.~
Sep 26 17:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:30 nativespace-cdp sudo[5980]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YC3idSDdbe0UhcBY.~'
Sep 26 17:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:30 nativespace-cdp sudo[5983]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YC3idSDdbe0UhcBY.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 17:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:30 nativespace-cdp sudo[5987]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 17:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:30 nativespace-cdp sudo[5990]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 26 17:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:35 nativespace-cdp sudo[5993]: pam_unix(sudo:session): session closed for user root
Sep 26 17:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 17:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 17:10:37 nativespace-cdp sudo[6027]: pam_unix(sudo:session): session closed for user root
Sep 26 17:11:33 nativespace-cdp sshd[6353]: Connection closed by 159.100.136.21 port 38920 [preauth]
Sep 26 17:16:04 nativespace-cdp sshd[7785]: Invalid user debianuser from 103.147.159.91 port 41720
Sep 26 17:16:04 nativespace-cdp sshd[7785]: input_userauth_request: invalid user debianuser [preauth]
Sep 26 17:16:04 nativespace-cdp sshd[7785]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 17:16:04 nativespace-cdp sshd[7785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.147.159.91
Sep 26 17:16:06 nativespace-cdp sshd[7785]: Failed password for invalid user debianuser from 103.147.159.91 port 41720 ssh2
Sep 26 17:16:06 nativespace-cdp sshd[7785]: Received disconnect from 103.147.159.91 port 41720:11: Bye Bye [preauth]
Sep 26 17:16:06 nativespace-cdp sshd[7785]: Disconnected from 103.147.159.91 port 41720 [preauth]
Sep 26 17:16:26 nativespace-cdp sshd[7880]: Connection closed by 103.147.159.91 port 41742 [preauth]
Sep 26 17:16:33 nativespace-cdp sshd[7925]: Connection closed by 159.100.136.21 port 48772 [preauth]
Sep 26 17:16:38 nativespace-cdp sshd[7933]: Invalid user debian from 103.147.159.91 port 41764
Sep 26 17:16:38 nativespace-cdp sshd[7933]: input_userauth_request: invalid user debian [preauth]
Sep 26 17:16:38 nativespace-cdp sshd[7933]: pam_unix(sshd:auth): check pass; user unknown
Sep 26 17:16:38 nativespace-cdp sshd[7933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.147.159.91
Sep 26 17:16:40 nativespace-cdp sshd[7933]: Failed password for invalid user debian from 103.147.159.91 port 41764 ssh2
Sep 26 17:16:40 nativespace-cdp sshd[7933]: Received disconnect from 103.147.159.91 port 41764:11: Bye Bye [preauth]
Sep 26 17:16:40 nativespace-cdp sshd[7933]: Disconnected from 103.147.159.91 port 41764 [preauth]
Sep 26 17:21:33 nativespace-cdp sshd[9104]: Connection closed by 159.100.136.21 port 58544 [preauth]
Sep 26 17:26:33 nativespace-cdp sshd[10395]: Connection closed by 159.100.136.21 port 39942 [preauth]
Sep 26 17:31:33 nativespace-cdp sshd[12231]: Connection closed by 159.100.136.21 port 49736 [preauth]
Sep 26 17:36:33 nativespace-cdp sshd[13519]: Connection closed by 159.100.136.21 port 59052 [preauth]
Sep 26 17:41:35 nativespace-cdp sshd[14674]: Connection closed by 159.100.136.21 port 40426 [preauth]
Sep 26 17:46:33 nativespace-cdp sshd[16546]: Connection closed by 159.100.136.21 port 49804 [preauth]
Sep 26 17:51:33 nativespace-cdp sshd[17681]: Connection closed by 159.100.136.21 port 59470 [preauth]
Sep 26 17:56:34 nativespace-cdp sshd[18852]: Connection closed by 159.100.136.21 port 41060 [preauth]
Sep 26 18:01:33 nativespace-cdp sshd[20069]: Connection closed by 159.100.136.21 port 50614 [preauth]
Sep 26 18:06:34 nativespace-cdp sshd[21373]: Connection closed by 159.100.136.21 port 60596 [preauth]
Sep 26 18:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 18:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:09:58 nativespace-cdp sudo[22050]: pam_unix(sudo:session): session closed for user root
Sep 26 18:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 18:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:09:58 nativespace-cdp sudo[22053]: pam_unix(sudo:session): session closed for user root
Sep 26 18:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 18:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:00 nativespace-cdp sudo[22056]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 18:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:00 nativespace-cdp sudo[22063]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 18:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:05 nativespace-cdp sudo[22066]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:06 nativespace-cdp sudo[22198]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:06 nativespace-cdp sudo[22205]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:06 nativespace-cdp sudo[22208]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:06 nativespace-cdp sudo[22211]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:06 nativespace-cdp sudo[22214]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:06 nativespace-cdp sudo[22217]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 18:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:21 nativespace-cdp sudo[22256]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 18:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:22 nativespace-cdp sudo[22262]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=booff user-2=markward user-3=foundation user-4=vantagep user-5=athenare user-6=connect9 user-7=lbscrmod user-8=maflemin user-9=ulsukarm user-10=jarvisin user-11=spectrum user-12=hodgesonweb user-13=theblack user-14=agproduc user-15=still user-16=stephani user-17=leereyn1 user-18=lakesan1 user-19=brmrjxl user-20=strathar user-21=atestord user-22=sarafoundation user-23=wilsonsw user-24=megacards user-25=musorguk user-26=martsblo user-27=dickemery123 user-28=ptkxhsbt user-29=hhdugcor user-30=lbhyisi user-31=magichat user-32=ultbcrra user-33=jonhartl user-34=seftvta user-35=firstres user-36=opaiscyx user-37=coursemc user-38=firstrel user-39=clarkass user-40=costestimatorco user-41=firstred user-42=highlegh user-43=southlon user-44=milloyco user-45=gilpin user-46=elecleis user-47=hubmaster
Sep 26 18:10:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=fetch user-49=carsinyo user-50=accooper user-51=ianrayne user-52=connectedshoppin user-53=thqkgnbz user-54=nstriton user-55=brighto1 user-56=vivienn1 user-57=firstre2 user-58=oneoarco user-59=battlere user-60=bedfords user-61=newstoda user-62=ggaaorgu user-63=belle user-64=bemadonn user-65=alexadmin user-66=skyfirec user-67=innovat1 user-68=askhform user-69=stuartge user-70=nativene user-71=asandcoc user-72=sibtoncc user-73=bwppodcast user-74=zebrapho user-75=steve user-76=fawcettd user-77=burydropin user-78=nsceres user-79=beauty user-80=darkstar user-81=eatspam user-82=dhyana user-83=nscdp user-84=foods user-85=leftie user-86=health2045 user-87=fortunaz user-88=lkpier user-89=firstre5 user-90=steakbridieme user-91=donnychicago user-92=philmcph user-93=ctedorgu user-94=isleofwi user-95=smrszyqg user-96=nomistakes user-97=hidden user-98=barbersh user-99=tigerlet user-100=cathski user-101=cambria1
Sep 26 18:10:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=ninejimm user-103=reliable user-104=cwsocial user-105=pugwash user-106=paulmca1 user-107=howardon user-108=hirefootballgame user-109=eugincou user-110=courseme user-111=tomandle user-112=jennimil user-113=chrisdal user-114=mcdermos user-115=david user-116=careers user-117=nbhavers user-118=lucy user-119=attlebor user-120=onlycont user-121=outdoorc user-122=hodgsonmail user-123=ranxterc user-124=branko user-125=romaldki user-126=nove user-127=boldover user-128=bakery user-129=crrtipdl user-130=sosevalu user-131=oubpgvbx user-132=tstardom user-133=what user-134=havantho user-135=cath user-136=sketchy user-137=nvihkvu user-138=stagingerris user-139=dancinggardener user-140=ladburyp user-141=kategilpin user-142=design feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 26 18:10:22 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 18:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:23 nativespace-cdp sudo[22273]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 18:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:23 nativespace-cdp sudo[22282]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Kbo8NqSoI9hFyrIr.~
Sep 26 18:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:24 nativespace-cdp sudo[22285]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Kbo8NqSoI9hFyrIr.~'
Sep 26 18:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:24 nativespace-cdp sudo[22288]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Kbo8NqSoI9hFyrIr.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 18:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:24 nativespace-cdp sudo[22292]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 18:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:24 nativespace-cdp sudo[22295]: pam_unix(sudo:session): session closed for user root
Sep 26 18:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 18:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 18:10:42 nativespace-cdp sudo[22349]: pam_unix(sudo:session): session closed for user root
Sep 26 18:11:34 nativespace-cdp sshd[22611]: Connection closed by 159.100.136.21 port 41650 [preauth]
Sep 26 18:16:35 nativespace-cdp sshd[24093]: Connection closed by 159.100.136.21 port 51484 [preauth]
Sep 26 18:20:38 nativespace-cdp sshd[24853]: Connection closed by 206.168.34.46 port 41746 [preauth]
Sep 26 18:21:33 nativespace-cdp sshd[25444]: Connection closed by 159.100.136.21 port 60840 [preauth]
Sep 26 18:22:41 nativespace-cdp sshd[26053]: Connection closed by 162.142.125.223 port 53226 [preauth]
Sep 26 18:26:35 nativespace-cdp sshd[27329]: Connection closed by 159.100.136.21 port 41746 [preauth]
Sep 26 18:31:35 nativespace-cdp sshd[28395]: Connection closed by 159.100.136.21 port 50700 [preauth]
Sep 26 18:36:35 nativespace-cdp sshd[29551]: Connection closed by 159.100.136.21 port 60378 [preauth]
Sep 26 18:41:33 nativespace-cdp sshd[30869]: Connection closed by 159.100.136.21 port 41590 [preauth]
Sep 26 18:46:36 nativespace-cdp sshd[32353]: Connection closed by 159.100.136.21 port 50712 [preauth]
Sep 26 18:51:33 nativespace-cdp sshd[1006]: Connection closed by 159.100.136.21 port 59520 [preauth]
Sep 26 18:56:33 nativespace-cdp sshd[2082]: Connection closed by 159.100.136.21 port 40840 [preauth]
Sep 26 19:01:43 nativespace-cdp sshd[3573]: Connection closed by 159.100.136.21 port 50142 [preauth]
Sep 26 19:06:34 nativespace-cdp sshd[4642]: Connection closed by 159.100.136.21 port 59632 [preauth]
Sep 26 19:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 19:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:09:57 nativespace-cdp sudo[5300]: pam_unix(sudo:session): session closed for user root
Sep 26 19:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 19:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:09:57 nativespace-cdp sudo[5303]: pam_unix(sudo:session): session closed for user root
Sep 26 19:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 19:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:09:58 nativespace-cdp sudo[5307]: pam_unix(sudo:session): session closed for user root
Sep 26 19:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 19:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:09:58 nativespace-cdp sudo[5314]: pam_unix(sudo:session): session closed for user root
Sep 26 19:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 19:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:01 nativespace-cdp sudo[5317]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:01 nativespace-cdp sudo[5329]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:01 nativespace-cdp sudo[5332]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:01 nativespace-cdp sudo[5336]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:01 nativespace-cdp sudo[5339]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:01 nativespace-cdp sudo[5342]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:01 nativespace-cdp sudo[5345]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 19:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:06 nativespace-cdp sudo[5478]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 19:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:06 nativespace-cdp sudo[5489]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=markward user-2=booff user-3=foundation user-4=lbscrmod user-5=maflemin user-6=vantagep user-7=connect9 user-8=athenare user-9=ulsukarm user-10=jarvisin user-11=hodgesonweb user-12=theblack user-13=spectrum user-14=agproduc user-15=still user-16=leereyn1 user-17=stephani user-18=brmrjxl user-19=lakesan1 user-20=atestord user-21=sarafoundation user-22=strathar user-23=wilsonsw user-24=megacards user-25=musorguk user-26=martsblo user-27=ptkxhsbt user-28=dickemery123 user-29=hhdugcor user-30=lbhyisi user-31=magichat user-32=firstres user-33=ultbcrra user-34=jonhartl user-35=seftvta user-36=coursemc user-37=opaiscyx user-38=costestimatorco user-39=firstrel user-40=clarkass user-41=highlegh user-42=southlon user-43=firstred user-44=elecleis user-45=milloyco user-46=gilpin user-47=fetch
Sep 26 19:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=carsinyo user-49=hubmaster user-50=ianrayne user-51=accooper user-52=thqkgnbz user-53=connectedshoppin user-54=nstriton user-55=brighto1 user-56=oneoarco user-57=battlere user-58=vivienn1 user-59=firstre2 user-60=bedfords user-61=bemadonn user-62=newstoda user-63=belle user-64=ggaaorgu user-65=alexadmin user-66=skyfirec user-67=stuartge user-68=askhform user-69=innovat1 user-70=nativene user-71=asandcoc user-72=sibtoncc user-73=zebrapho user-74=bwppodcast user-75=steve user-76=fawcettd user-77=burydropin user-78=nsceres user-79=darkstar user-80=eatspam user-81=beauty user-82=dhyana user-83=foods user-84=leftie user-85=health2045 user-86=fortunaz user-87=nscdp user-88=donnychicago user-89=steakbridieme user-90=firstre5 user-91=ctedorgu user-92=philmcph user-93=lkpier user-94=smrszyqg user-95=isleofwi user-96=tigerlet user-97=barbersh user-98=nomistakes user-99=hidden user-100=ninejimm user-101=reliable
Sep 26 19:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=cathski user-103=cambria1 user-104=cwsocial user-105=howardon user-106=paulmca1 user-107=pugwash user-108=hirefootballgame user-109=courseme user-110=eugincou user-111=tomandle user-112=jennimil user-113=mcdermos user-114=chrisdal user-115=david user-116=careers user-117=nbhavers user-118=lucy user-119=attlebor user-120=onlycont user-121=branko user-122=outdoorc user-123=hodgsonmail user-124=ranxterc user-125=romaldki user-126=nove user-127=boldover user-128=crrtipdl user-129=sosevalu user-130=bakery user-131=what user-132=tstardom user-133=oubpgvbx user-134=nvihkvu user-135=havantho user-136=sketchy user-137=cath user-138=kategilpin user-139=stagingerris user-140=dancinggardener user-141=ladburyp user-142=design feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 26 19:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 19:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:07 nativespace-cdp sudo[5497]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:08 nativespace-cdp sudo[5503]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fcL4ZTAVwMPGBpRE.~
Sep 26 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:08 nativespace-cdp sudo[5507]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fcL4ZTAVwMPGBpRE.~'
Sep 26 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:08 nativespace-cdp sudo[5510]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fcL4ZTAVwMPGBpRE.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:08 nativespace-cdp sudo[5514]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:08 nativespace-cdp sudo[5517]: pam_unix(sudo:session): session closed for user root
Sep 26 19:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 19:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 19:10:19 nativespace-cdp sudo[5562]: pam_unix(sudo:session): session closed for user root
Sep 26 19:11:35 nativespace-cdp sshd[5818]: Connection closed by 159.100.136.21 port 40656 [preauth]
Sep 26 19:16:33 nativespace-cdp sshd[7206]: Connection closed by 159.100.136.21 port 50192 [preauth]
Sep 26 19:21:34 nativespace-cdp sshd[8244]: Connection closed by 159.100.136.21 port 59610 [preauth]
Sep 26 19:26:35 nativespace-cdp sshd[9241]: Connection closed by 159.100.136.21 port 40668 [preauth]
Sep 26 19:31:34 nativespace-cdp sshd[10427]: Connection closed by 159.100.136.21 port 50052 [preauth]
Sep 26 19:36:33 nativespace-cdp sshd[11732]: Connection closed by 159.100.136.21 port 59402 [preauth]
Sep 26 19:41:33 nativespace-cdp sshd[12792]: Connection closed by 159.100.136.21 port 40080 [preauth]
Sep 26 19:46:33 nativespace-cdp sshd[14201]: Connection closed by 159.100.136.21 port 49286 [preauth]
Sep 26 19:51:33 nativespace-cdp sshd[15266]: Connection closed by 159.100.136.21 port 58818 [preauth]
Sep 26 19:56:33 nativespace-cdp sshd[16498]: Connection closed by 159.100.136.21 port 40186 [preauth]
Sep 26 20:01:33 nativespace-cdp sshd[17698]: Connection closed by 159.100.136.21 port 49784 [preauth]
Sep 26 20:06:35 nativespace-cdp sshd[18960]: Connection closed by 159.100.136.21 port 59794 [preauth]
Sep 26 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:09:58 nativespace-cdp sudo[19876]: pam_unix(sudo:session): session closed for user root
Sep 26 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:09:58 nativespace-cdp sudo[19880]: pam_unix(sudo:session): session closed for user root
Sep 26 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:00 nativespace-cdp sudo[19883]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 20:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:00 nativespace-cdp sudo[19890]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 20:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:04 nativespace-cdp sudo[19894]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 20:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:04 nativespace-cdp sudo[20028]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 20:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:04 nativespace-cdp sudo[20031]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 20:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:04 nativespace-cdp sudo[20034]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 20:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:04 nativespace-cdp sudo[20037]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 20:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:04 nativespace-cdp sudo[20041]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 20:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:05 nativespace-cdp sudo[20044]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 20:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:08 nativespace-cdp sudo[20061]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 20:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:10 nativespace-cdp sudo[20068]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=martsblo user-2=dickemery123 user-3=ptkxhsbt user-4=lbhyisi user-5=hhdugcor user-6=magichat user-7=brmrjxl user-8=lakesan1 user-9=strathar user-10=sarafoundation user-11=atestord user-12=wilsonsw user-13=musorguk user-14=megacards user-15=jarvisin user-16=spectrum user-17=hodgesonweb user-18=theblack user-19=still user-20=agproduc user-21=stephani user-22=leereyn1 user-23=booff user-24=markward user-25=foundation user-26=athenare user-27=connect9 user-28=vantagep user-29=maflemin user-30=lbscrmod user-31=ulsukarm user-32=skyfirec user-33=alexadmin user-34=innovat1 user-35=askhform user-36=stuartge user-37=nativene user-38=brighto1 user-39=nstriton user-40=firstre2 user-41=vivienn1 user-42=battlere user-43=oneoarco user-44=bedfords user-45=belle user-46=ggaaorgu user-47=newstoda user-48=bemadonn
Sep 26 20:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=milloyco user-50=gilpin user-51=elecleis user-52=hubmaster user-53=carsinyo user-54=fetch user-55=accooper user-56=ianrayne user-57=connectedshoppin user-58=thqkgnbz user-59=seftvta user-60=jonhartl user-61=ultbcrra user-62=firstres user-63=opaiscyx user-64=coursemc user-65=firstrel user-66=clarkass user-67=costestimatorco user-68=firstred user-69=southlon user-70=highlegh user-71=cathski user-72=cambria1 user-73=reliable user-74=ninejimm user-75=pugwash user-76=paulmca1 user-77=howardon user-78=cwsocial user-79=hirefootballgame user-80=eugincou user-81=courseme user-82=nscdp user-83=health2045 user-84=fortunaz user-85=foods user-86=leftie user-87=lkpier user-88=ctedorgu user-89=philmcph user-90=donnychicago user-91=steakbridieme user-92=firstre5 user-93=isleofwi user-94=smrszyqg user-95=hidden user-96=nomistakes user-97=barbersh user-98=tigerlet user-99=burydropin user-100=fawcettd user-101=nsceres
Sep 26 20:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=beauty user-103=eatspam user-104=darkstar user-105=dhyana user-106=sibtoncc user-107=asandcoc user-108=bwppodcast user-109=zebrapho user-110=steve user-111=tstardom user-112=oubpgvbx user-113=what user-114=cath user-115=sketchy user-116=havantho user-117=nvihkvu user-118=ladburyp user-119=stagingerris user-120=dancinggardener user-121=kategilpin user-122=design user-123=nove user-124=boldover user-125=bakery user-126=sosevalu user-127=crrtipdl user-128=attlebor user-129=lucy user-130=onlycont user-131=hodgsonmail user-132=outdoorc user-133=ranxterc user-134=branko user-135=romaldki user-136=tomandle user-137=jennimil user-138=chrisdal user-139=mcdermos user-140=careers user-141=nbhavers user-142=david feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 20:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 20:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:12 nativespace-cdp sudo[20080]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 20:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:13 nativespace-cdp sudo[20114]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-G4SK2JlYHz6IqLy2.~
Sep 26 20:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:13 nativespace-cdp sudo[20117]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-G4SK2JlYHz6IqLy2.~'
Sep 26 20:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:13 nativespace-cdp sudo[20121]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-G4SK2JlYHz6IqLy2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 20:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:13 nativespace-cdp sudo[20125]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 20:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:13 nativespace-cdp sudo[20128]: pam_unix(sudo:session): session closed for user root
Sep 26 20:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 20:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 20:10:26 nativespace-cdp sudo[20188]: pam_unix(sudo:session): session closed for user root
Sep 26 20:11:33 nativespace-cdp sshd[20420]: Connection closed by 159.100.136.21 port 41182 [preauth]
Sep 26 20:16:34 nativespace-cdp sshd[23933]: Connection closed by 159.100.136.21 port 51030 [preauth]
Sep 26 20:21:34 nativespace-cdp sshd[25200]: Connection closed by 159.100.136.21 port 60278 [preauth]
Sep 26 20:26:33 nativespace-cdp sshd[26230]: Connection closed by 159.100.136.21 port 41674 [preauth]
Sep 26 20:31:33 nativespace-cdp sshd[27795]: Connection closed by 159.100.136.21 port 51506 [preauth]
Sep 26 20:36:34 nativespace-cdp sshd[28918]: Connection closed by 159.100.136.21 port 33268 [preauth]
Sep 26 20:41:33 nativespace-cdp sshd[30028]: Connection closed by 159.100.136.21 port 42832 [preauth]
Sep 26 20:46:36 nativespace-cdp sshd[31581]: Connection closed by 159.100.136.21 port 52430 [preauth]
Sep 26 20:51:34 nativespace-cdp sshd[32760]: Connection closed by 159.100.136.21 port 33266 [preauth]
Sep 26 20:56:33 nativespace-cdp sshd[1610]: Connection closed by 159.100.136.21 port 43458 [preauth]
Sep 26 21:01:36 nativespace-cdp sshd[2830]: Connection closed by 159.100.136.21 port 52650 [preauth]
Sep 26 21:06:33 nativespace-cdp sshd[3906]: Connection closed by 159.100.136.21 port 34194 [preauth]
Sep 26 21:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 21:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:03 nativespace-cdp sudo[4855]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 21:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:03 nativespace-cdp sudo[4867]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 21:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:07 nativespace-cdp sudo[4872]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:07 nativespace-cdp sudo[4899]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:13 nativespace-cdp sudo[4903]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 21:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:13 nativespace-cdp sudo[4983]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 21:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:13 nativespace-cdp sudo[4986]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 21:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:13 nativespace-cdp sudo[4989]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 21:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:13 nativespace-cdp sudo[4993]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 21:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:13 nativespace-cdp sudo[4996]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:14 nativespace-cdp sudo[4999]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 21:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:20 nativespace-cdp sudo[5018]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 21:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:22 nativespace-cdp sudo[5023]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=magichat user-2=hhdugcor user-3=lbhyisi user-4=ptkxhsbt user-5=dickemery123 user-6=martsblo user-7=megacards user-8=musorguk user-9=wilsonsw user-10=atestord user-11=sarafoundation user-12=strathar user-13=brmrjxl user-14=lakesan1 user-15=leereyn1 user-16=stephani user-17=agproduc user-18=still user-19=hodgesonweb user-20=theblack user-21=spectrum user-22=jarvisin user-23=ulsukarm user-24=lbscrmod user-25=maflemin user-26=vantagep user-27=connect9 user-28=athenare user-29=markward user-30=booff user-31=foundation user-32=nativene user-33=askhform user-34=stuartge user-35=innovat1 user-36=alexadmin user-37=skyfirec user-38=bemadonn user-39=newstoda user-40=ggaaorgu user-41=belle user-42=bedfords user-43=oneoarco user-44=battlere user-45=vivienn1 user-46=firstre2 user-47=nstriton user-48=brighto1
Sep 26 21:10:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=thqkgnbz user-50=connectedshoppin user-51=ianrayne user-52=accooper user-53=fetch user-54=carsinyo user-55=hubmaster user-56=elecleis user-57=gilpin user-58=milloyco user-59=highlegh user-60=southlon user-61=firstred user-62=costestimatorco user-63=clarkass user-64=firstrel user-65=opaiscyx user-66=coursemc user-67=firstres user-68=ultbcrra user-69=seftvta user-70=jonhartl user-71=courseme user-72=eugincou user-73=hirefootballgame user-74=cwsocial user-75=pugwash user-76=howardon user-77=paulmca1 user-78=ninejimm user-79=reliable user-80=cathski user-81=cambria1 user-82=tigerlet user-83=barbersh user-84=nomistakes user-85=hidden user-86=smrszyqg user-87=isleofwi user-88=steakbridieme user-89=firstre5 user-90=donnychicago user-91=ctedorgu user-92=philmcph user-93=lkpier user-94=leftie user-95=foods user-96=health2045 user-97=fortunaz user-98=nscdp user-99=dhyana user-100=darkstar user-101=eatspam
Sep 26 21:10:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=beauty user-103=nsceres user-104=fawcettd user-105=burydropin user-106=steve user-107=zebrapho user-108=bwppodcast user-109=sibtoncc user-110=asandcoc user-111=design user-112=kategilpin user-113=dancinggardener user-114=stagingerris user-115=ladburyp user-116=nvihkvu user-117=havantho user-118=sketchy user-119=cath user-120=what user-121=tstardom user-122=oubpgvbx user-123=crrtipdl user-124=sosevalu user-125=bakery user-126=boldover user-127=nove user-128=romaldki user-129=branko user-130=hodgsonmail user-131=ranxterc user-132=outdoorc user-133=onlycont user-134=lucy user-135=attlebor user-136=david user-137=careers user-138=nbhavers user-139=mcdermos user-140=chrisdal user-141=jennimil user-142=tomandle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 21:10:22 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 21:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:24 nativespace-cdp sudo[5031]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 21:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:25 nativespace-cdp sudo[5038]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2H8CMP4HydKQGRvW.~
Sep 26 21:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:25 nativespace-cdp sudo[5041]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2H8CMP4HydKQGRvW.~'
Sep 26 21:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:25 nativespace-cdp sudo[5044]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2H8CMP4HydKQGRvW.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 21:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:25 nativespace-cdp sudo[5048]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 21:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:25 nativespace-cdp sudo[5052]: pam_unix(sudo:session): session closed for user root
Sep 26 21:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 21:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:10:37 nativespace-cdp sudo[5098]: pam_unix(sudo:session): session closed for user root
Sep 26 21:11:33 nativespace-cdp sshd[5284]: Connection closed by 159.100.136.21 port 43640 [preauth]
Sep 26 21:16:33 nativespace-cdp sshd[6642]: Connection closed by 159.100.136.21 port 53452 [preauth]
Sep 26 21:21:33 nativespace-cdp sshd[7634]: Connection closed by 159.100.136.21 port 33830 [preauth]
Sep 26 21:26:33 nativespace-cdp sshd[8631]: Connection closed by 159.100.136.21 port 43328 [preauth]
Sep 26 21:31:34 nativespace-cdp sshd[9995]: Connection closed by 159.100.136.21 port 52796 [preauth]
Sep 26 21:36:33 nativespace-cdp sshd[11662]: Connection closed by 159.100.136.21 port 34320 [preauth]
Sep 26 21:41:33 nativespace-cdp sshd[12867]: Connection closed by 159.100.136.21 port 43540 [preauth]
Sep 26 21:46:33 nativespace-cdp sshd[14267]: Connection closed by 159.100.136.21 port 53500 [preauth]
Sep 26 21:51:33 nativespace-cdp sshd[15304]: Connection closed by 159.100.136.21 port 34260 [preauth]
Sep 26 21:55:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 21:55:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:55:48 nativespace-cdp sudo[16419]: pam_unix(sudo:session): session closed for user root
Sep 26 21:55:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status nstriton
Sep 26 21:55:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 21:55:51 nativespace-cdp sudo[16431]: pam_unix(sudo:session): session closed for user root
Sep 26 21:56:36 nativespace-cdp sshd[16600]: Connection closed by 159.100.136.21 port 44024 [preauth]
Sep 26 22:01:33 nativespace-cdp sshd[17956]: Connection closed by 159.100.136.21 port 53280 [preauth]
Sep 26 22:06:34 nativespace-cdp sshd[19470]: Connection closed by 159.100.136.21 port 34716 [preauth]
Sep 26 22:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 22:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:09:56 nativespace-cdp sudo[20068]: pam_unix(sudo:session): session closed for user root
Sep 26 22:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 22:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:09:56 nativespace-cdp sudo[20071]: pam_unix(sudo:session): session closed for user root
Sep 26 22:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 22:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:09:57 nativespace-cdp sudo[20074]: pam_unix(sudo:session): session closed for user root
Sep 26 22:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 22:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:09:57 nativespace-cdp sudo[20078]: pam_unix(sudo:session): session closed for user root
Sep 26 22:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 22:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:00 nativespace-cdp sudo[20083]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:00 nativespace-cdp sudo[20093]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:00 nativespace-cdp sudo[20096]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:00 nativespace-cdp sudo[20100]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:00 nativespace-cdp sudo[20103]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:00 nativespace-cdp sudo[20109]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 22:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:01 nativespace-cdp sudo[20112]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 22:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:09 nativespace-cdp sudo[20247]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 22:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:09 nativespace-cdp sudo[20252]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=nativene user-4=askhform user-5=stuartge user-6=innovat1 user-7=battlere user-8=oneoarco user-9=firstre2 user-10=vivienn1 user-11=brighto1 user-12=nstriton user-13=bemadonn user-14=belle user-15=ggaaorgu user-16=newstoda user-17=bedfords user-18=carsinyo user-19=fetch user-20=hubmaster user-21=elecleis user-22=milloyco user-23=gilpin user-24=thqkgnbz user-25=connectedshoppin user-26=ianrayne user-27=accooper user-28=opaiscyx user-29=coursemc user-30=firstres user-31=jonhartl user-32=seftvta user-33=ultbcrra user-34=southlon user-35=highlegh user-36=firstred user-37=costestimatorco user-38=firstrel user-39=clarkass user-40=ptkxhsbt user-41=dickemery123 user-42=martsblo user-43=magichat user-44=lbhyisi user-45=hhdugcor user-46=sarafoundation user-47=atestord
Sep 26 22:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=strathar user-49=brmrjxl user-50=lakesan1 user-51=musorguk user-52=megacards user-53=wilsonsw user-54=theblack user-55=hodgesonweb user-56=spectrum user-57=jarvisin user-58=leereyn1 user-59=stephani user-60=still user-61=agproduc user-62=maflemin user-63=lbscrmod user-64=connect9 user-65=athenare user-66=vantagep user-67=markward user-68=booff user-69=foundation user-70=ulsukarm user-71=nvihkvu user-72=cath user-73=sketchy user-74=havantho user-75=what user-76=oubpgvbx user-77=tstardom user-78=design user-79=kategilpin user-80=ladburyp user-81=dancinggardener user-82=stagingerris user-83=boldover user-84=nove user-85=sosevalu user-86=crrtipdl user-87=bakery user-88=onlycont user-89=attlebor user-90=lucy user-91=romaldki user-92=branko user-93=ranxterc user-94=hodgsonmail user-95=outdoorc user-96=jennimil user-97=tomandle user-98=nbhavers user-99=careers user-100=david user-101=mcdermos user-102=chrisdal
Sep 26 22:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=howardon user-104=pugwash user-105=paulmca1 user-106=cwsocial user-107=ninejimm user-108=reliable user-109=cathski user-110=cambria1 user-111=courseme user-112=eugincou user-113=hirefootballgame user-114=philmcph user-115=ctedorgu user-116=firstre5 user-117=steakbridieme user-118=donnychicago user-119=lkpier user-120=fortunaz user-121=health2045 user-122=leftie user-123=foods user-124=nscdp user-125=tigerlet user-126=barbersh user-127=hidden user-128=nomistakes user-129=smrszyqg user-130=isleofwi user-131=nsceres user-132=burydropin user-133=fawcettd user-134=dhyana user-135=eatspam user-136=darkstar user-137=beauty user-138=sibtoncc user-139=asandcoc user-140=steve user-141=zebrapho user-142=bwppodcast feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 22:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 22:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:10 nativespace-cdp sudo[20256]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 22:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:11 nativespace-cdp sudo[20312]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-F1pFAK6SuYUlS31H.~
Sep 26 22:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:11 nativespace-cdp sudo[20315]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-F1pFAK6SuYUlS31H.~'
Sep 26 22:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:11 nativespace-cdp sudo[20318]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-F1pFAK6SuYUlS31H.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 22:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:11 nativespace-cdp sudo[20322]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 22:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:11 nativespace-cdp sudo[20325]: pam_unix(sudo:session): session closed for user root
Sep 26 22:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 22:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 22:10:28 nativespace-cdp sudo[20375]: pam_unix(sudo:session): session closed for user root
Sep 26 22:11:34 nativespace-cdp sshd[20539]: Connection closed by 159.100.136.21 port 44454 [preauth]
Sep 26 22:16:33 nativespace-cdp sshd[21881]: Connection closed by 159.100.136.21 port 54386 [preauth]
Sep 26 22:21:34 nativespace-cdp sshd[23003]: Connection closed by 159.100.136.21 port 35434 [preauth]
Sep 26 22:26:33 nativespace-cdp sshd[23992]: Connection closed by 159.100.136.21 port 45494 [preauth]
Sep 26 22:31:34 nativespace-cdp sshd[25213]: Connection closed by 159.100.136.21 port 55044 [preauth]
Sep 26 22:36:34 nativespace-cdp sshd[26407]: Connection closed by 159.100.136.21 port 36728 [preauth]
Sep 26 22:41:33 nativespace-cdp sshd[27417]: Connection closed by 159.100.136.21 port 46178 [preauth]
Sep 26 22:46:34 nativespace-cdp sshd[28782]: Connection closed by 159.100.136.21 port 56052 [preauth]
Sep 26 22:51:33 nativespace-cdp sshd[29861]: Connection closed by 159.100.136.21 port 36872 [preauth]
Sep 26 22:56:33 nativespace-cdp sshd[30923]: Connection closed by 159.100.136.21 port 46716 [preauth]
Sep 26 23:01:33 nativespace-cdp sshd[32408]: Connection closed by 159.100.136.21 port 55634 [preauth]
Sep 26 23:06:35 nativespace-cdp sshd[1007]: Connection closed by 159.100.136.21 port 37046 [preauth]
Sep 26 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 26 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:52 nativespace-cdp sudo[1587]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 26 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:52 nativespace-cdp sudo[1591]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 26 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:54 nativespace-cdp sudo[1595]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 26 23:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:54 nativespace-cdp sudo[1601]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 26 23:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:56 nativespace-cdp sudo[1605]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 26 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:56 nativespace-cdp sudo[1613]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 26 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:56 nativespace-cdp sudo[1616]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 26 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:56 nativespace-cdp sudo[1619]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 26 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:56 nativespace-cdp sudo[1622]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 26 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:56 nativespace-cdp sudo[1625]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 26 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:56 nativespace-cdp sudo[1629]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 26 23:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:58 nativespace-cdp sudo[1639]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 26 23:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:58 nativespace-cdp sudo[1643]: pam_unix(sudo:session): session closed for user root
Sep 26 23:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=costestimatorco user-2=firstrel user-3=clarkass user-4=highlegh user-5=southlon user-6=firstred user-7=firstres user-8=ultbcrra user-9=jonhartl user-10=seftvta user-11=coursemc user-12=opaiscyx user-13=ianrayne user-14=accooper user-15=thqkgnbz user-16=connectedshoppin user-17=elecleis user-18=gilpin user-19=milloyco user-20=fetch user-21=carsinyo user-22=hubmaster user-23=bedfords user-24=bemadonn user-25=newstoda user-26=belle user-27=ggaaorgu user-28=nstriton user-29=brighto1 user-30=oneoarco user-31=battlere user-32=vivienn1 user-33=firstre2 user-34=stuartge user-35=askhform user-36=innovat1 user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=foundation user-42=booff user-43=markward user-44=lbscrmod user-45=maflemin user-46=vantagep user-47=connect9 user-48=athenare
Sep 26 23:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=agproduc user-50=still user-51=leereyn1 user-52=stephani user-53=jarvisin user-54=theblack user-55=hodgesonweb user-56=spectrum user-57=wilsonsw user-58=megacards user-59=musorguk user-60=brmrjxl user-61=lakesan1 user-62=atestord user-63=sarafoundation user-64=strathar user-65=hhdugcor user-66=lbhyisi user-67=magichat user-68=martsblo user-69=ptkxhsbt user-70=dickemery123 user-71=mcdermos user-72=chrisdal user-73=david user-74=careers user-75=nbhavers user-76=tomandle user-77=jennimil user-78=branko user-79=hodgsonmail user-80=outdoorc user-81=ranxterc user-82=romaldki user-83=lucy user-84=attlebor user-85=onlycont user-86=crrtipdl user-87=sosevalu user-88=bakery user-89=nove user-90=boldover user-91=kategilpin user-92=dancinggardener user-93=stagingerris user-94=ladburyp user-95=design user-96=what user-97=oubpgvbx user-98=tstardom user-99=nvihkvu user-100=havantho user-101=sketchy user-102=cath
Sep 26 23:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=zebrapho user-104=bwppodcast user-105=steve user-106=sibtoncc user-107=asandcoc user-108=darkstar user-109=eatspam user-110=beauty user-111=dhyana user-112=fawcettd user-113=burydropin user-114=nsceres user-115=isleofwi user-116=smrszyqg user-117=barbersh user-118=tigerlet user-119=nomistakes user-120=hidden user-121=leftie user-122=foods user-123=fortunaz user-124=health2045 user-125=nscdp user-126=firstre5 user-127=steakbridieme user-128=donnychicago user-129=philmcph user-130=ctedorgu user-131=lkpier user-132=hirefootballgame user-133=courseme user-134=eugincou user-135=reliable user-136=ninejimm user-137=cathski user-138=cambria1 user-139=cwsocial user-140=paulmca1 user-141=howardon user-142=pugwash feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 26 23:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 26 23:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:09:59 nativespace-cdp sudo[1650]: pam_unix(sudo:session): session closed for user root
Sep 26 23:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 23:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:10:00 nativespace-cdp sudo[1657]: pam_unix(sudo:session): session closed for user root
Sep 26 23:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uDkxwWPmwZBtYKqP.~
Sep 26 23:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:10:00 nativespace-cdp sudo[1660]: pam_unix(sudo:session): session closed for user root
Sep 26 23:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uDkxwWPmwZBtYKqP.~'
Sep 26 23:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:10:00 nativespace-cdp sudo[1667]: pam_unix(sudo:session): session closed for user root
Sep 26 23:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uDkxwWPmwZBtYKqP.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 26 23:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:10:00 nativespace-cdp sudo[1671]: pam_unix(sudo:session): session closed for user root
Sep 26 23:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 26 23:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:10:00 nativespace-cdp sudo[1674]: pam_unix(sudo:session): session closed for user root
Sep 26 23:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 26 23:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 26 23:10:01 nativespace-cdp sudo[1692]: pam_unix(sudo:session): session closed for user root
Sep 26 23:11:35 nativespace-cdp sshd[2087]: Connection closed by 159.100.136.21 port 45980 [preauth]
Sep 26 23:16:34 nativespace-cdp sshd[3436]: Connection closed by 159.100.136.21 port 55756 [preauth]
Sep 26 23:21:33 nativespace-cdp sshd[4475]: Connection closed by 159.100.136.21 port 37202 [preauth]
Sep 26 23:26:34 nativespace-cdp sshd[5572]: Connection closed by 159.100.136.21 port 46882 [preauth]
Sep 26 23:31:33 nativespace-cdp sshd[6945]: Connection closed by 159.100.136.21 port 56212 [preauth]
Sep 26 23:36:33 nativespace-cdp sshd[7868]: Connection closed by 159.100.136.21 port 37618 [preauth]
Sep 26 23:41:36 nativespace-cdp sshd[8844]: Connection closed by 159.100.136.21 port 47104 [preauth]
Sep 26 23:46:34 nativespace-cdp sshd[10079]: Connection closed by 159.100.136.21 port 56690 [preauth]
Sep 26 23:51:33 nativespace-cdp sshd[11304]: Connection closed by 159.100.136.21 port 38140 [preauth]
Sep 26 23:56:33 nativespace-cdp sshd[12340]: Connection closed by 159.100.136.21 port 47616 [preauth]
Sep 27 00:01:33 nativespace-cdp sshd[13804]: Connection closed by 159.100.136.21 port 57074 [preauth]
Sep 27 00:06:33 nativespace-cdp sshd[14736]: Connection closed by 159.100.136.21 port 38858 [preauth]
Sep 27 00:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 00:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:09:56 nativespace-cdp sudo[15280]: pam_unix(sudo:session): session closed for user root
Sep 27 00:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 00:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:09:56 nativespace-cdp sudo[15283]: pam_unix(sudo:session): session closed for user root
Sep 27 00:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 00:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:09:57 nativespace-cdp sudo[15287]: pam_unix(sudo:session): session closed for user root
Sep 27 00:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 00:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:09:57 nativespace-cdp sudo[15291]: pam_unix(sudo:session): session closed for user root
Sep 27 00:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 00:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:00 nativespace-cdp sudo[15295]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 00:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:00 nativespace-cdp sudo[15306]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 00:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:00 nativespace-cdp sudo[15309]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 00:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:00 nativespace-cdp sudo[15312]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 00:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:00 nativespace-cdp sudo[15315]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 00:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:00 nativespace-cdp sudo[15318]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 00:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:00 nativespace-cdp sudo[15321]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 00:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:06 nativespace-cdp sudo[15459]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 00:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:06 nativespace-cdp sudo[15476]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=markward user-3=booff user-4=foundation user-5=connect9 user-6=athenare user-7=vantagep user-8=maflemin user-9=lbscrmod user-10=still user-11=agproduc user-12=stephani user-13=leereyn1 user-14=jarvisin user-15=spectrum user-16=hodgesonweb user-17=theblack user-18=wilsonsw user-19=musorguk user-20=megacards user-21=brmrjxl user-22=lakesan1 user-23=strathar user-24=sarafoundation user-25=atestord user-26=lbhyisi user-27=hhdugcor user-28=magichat user-29=martsblo user-30=dickemery123 user-31=ptkxhsbt user-32=firstrel user-33=clarkass user-34=costestimatorco user-35=firstred user-36=southlon user-37=highlegh user-38=jonhartl user-39=seftvta user-40=ultbcrra user-41=firstres user-42=coursemc user-43=opaiscyx user-44=accooper user-45=ianrayne user-46=connectedshoppin user-47=thqkgnbz
Sep 27 00:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=milloyco user-49=gilpin user-50=elecleis user-51=hubmaster user-52=carsinyo user-53=fetch user-54=bedfords user-55=ggaaorgu user-56=belle user-57=newstoda user-58=bemadonn user-59=brighto1 user-60=nstriton user-61=firstre2 user-62=vivienn1 user-63=battlere user-64=oneoarco user-65=innovat1 user-66=askhform user-67=stuartge user-68=nativene user-69=alexadmin user-70=skyfirec user-71=bwppodcast user-72=zebrapho user-73=steve user-74=sibtoncc user-75=asandcoc user-76=beauty user-77=eatspam user-78=darkstar user-79=dhyana user-80=burydropin user-81=fawcettd user-82=nsceres user-83=smrszyqg user-84=isleofwi user-85=hidden user-86=nomistakes user-87=barbersh user-88=tigerlet user-89=nscdp user-90=fortunaz user-91=health2045 user-92=foods user-93=leftie user-94=lkpier user-95=ctedorgu user-96=philmcph user-97=donnychicago user-98=steakbridieme user-99=firstre5 user-100=hirefootballgame user-101=eugincou
Sep 27 00:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=courseme user-103=cathski user-104=cambria1 user-105=ninejimm user-106=reliable user-107=paulmca1 user-108=pugwash user-109=howardon user-110=cwsocial user-111=chrisdal user-112=mcdermos user-113=careers user-114=nbhavers user-115=david user-116=tomandle user-117=jennimil user-118=outdoorc user-119=ranxterc user-120=hodgsonmail user-121=branko user-122=romaldki user-123=attlebor user-124=lucy user-125=onlycont user-126=bakery user-127=sosevalu user-128=crrtipdl user-129=nove user-130=boldover user-131=ladburyp user-132=stagingerris user-133=dancinggardener user-134=kategilpin user-135=design user-136=oubpgvbx user-137=tstardom user-138=what user-139=sketchy user-140=cath user-141=havantho user-142=nvihkvu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 00:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 00:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:09 nativespace-cdp sudo[15482]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 00:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:10 nativespace-cdp sudo[15490]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XlgjTTgVBdepXI1T.~
Sep 27 00:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:10 nativespace-cdp sudo[15493]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XlgjTTgVBdepXI1T.~'
Sep 27 00:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:10 nativespace-cdp sudo[15496]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XlgjTTgVBdepXI1T.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 00:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:10 nativespace-cdp sudo[15501]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 00:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:10 nativespace-cdp sudo[15504]: pam_unix(sudo:session): session closed for user root
Sep 27 00:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 00:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 00:10:24 nativespace-cdp sudo[15549]: pam_unix(sudo:session): session closed for user root
Sep 27 00:11:33 nativespace-cdp sshd[15753]: Connection closed by 159.100.136.21 port 48266 [preauth]
Sep 27 00:16:33 nativespace-cdp sshd[17170]: Connection closed by 159.100.136.21 port 57342 [preauth]
Sep 27 00:21:35 nativespace-cdp sshd[18193]: Connection closed by 159.100.136.21 port 38004 [preauth]
Sep 27 00:26:33 nativespace-cdp sshd[19138]: Connection closed by 159.100.136.21 port 47026 [preauth]
Sep 27 00:31:33 nativespace-cdp sshd[20504]: Connection closed by 159.100.136.21 port 56280 [preauth]
Sep 27 00:36:34 nativespace-cdp sshd[21463]: Connection closed by 159.100.136.21 port 36814 [preauth]
Sep 27 00:41:33 nativespace-cdp sshd[22510]: Connection closed by 159.100.136.21 port 45666 [preauth]
Sep 27 00:46:36 nativespace-cdp sshd[23818]: Connection closed by 159.100.136.21 port 55388 [preauth]
Sep 27 00:51:35 nativespace-cdp sshd[24803]: Connection closed by 159.100.136.21 port 36790 [preauth]
Sep 27 00:56:33 nativespace-cdp sshd[25747]: Connection closed by 159.100.136.21 port 46436 [preauth]
Sep 27 01:01:33 nativespace-cdp sshd[27206]: Connection closed by 159.100.136.21 port 56082 [preauth]
Sep 27 01:06:33 nativespace-cdp sshd[28274]: Connection closed by 159.100.136.21 port 37786 [preauth]
Sep 27 01:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 01:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:09:58 nativespace-cdp sudo[28830]: pam_unix(sudo:session): session closed for user root
Sep 27 01:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 01:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:09:58 nativespace-cdp sudo[28833]: pam_unix(sudo:session): session closed for user root
Sep 27 01:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 01:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:09:59 nativespace-cdp sudo[28836]: pam_unix(sudo:session): session closed for user root
Sep 27 01:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 01:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:09:59 nativespace-cdp sudo[28842]: pam_unix(sudo:session): session closed for user root
Sep 27 01:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 01:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:05 nativespace-cdp sudo[28845]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 01:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:05 nativespace-cdp sudo[28964]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 01:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:05 nativespace-cdp sudo[28975]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 01:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:05 nativespace-cdp sudo[28978]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 01:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:05 nativespace-cdp sudo[28981]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 01:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:05 nativespace-cdp sudo[28984]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 01:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:05 nativespace-cdp sudo[28988]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 01:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:14 nativespace-cdp sudo[29040]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 01:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:14 nativespace-cdp sudo[29044]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=boldover user-2=nove user-3=sosevalu user-4=crrtipdl user-5=bakery user-6=nvihkvu user-7=sketchy user-8=cath user-9=havantho user-10=what user-11=oubpgvbx user-12=tstardom user-13=design user-14=kategilpin user-15=ladburyp user-16=dancinggardener user-17=stagingerris user-18=jennimil user-19=tomandle user-20=nbhavers user-21=careers user-22=david user-23=mcdermos user-24=chrisdal user-25=onlycont user-26=attlebor user-27=lucy user-28=romaldki user-29=branko user-30=ranxterc user-31=outdoorc user-32=hodgsonmail user-33=ctedorgu user-34=philmcph user-35=steakbridieme user-36=donnychicago user-37=firstre5 user-38=lkpier user-39=health2045 user-40=fortunaz user-41=foods user-42=leftie user-43=nscdp user-44=tigerlet user-45=barbersh user-46=hidden user-47=nomistakes user-48=isleofwi user-49=smrszyqg
Sep 27 01:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=pugwash user-51=paulmca1 user-52=howardon user-53=cwsocial user-54=reliable user-55=ninejimm user-56=cathski user-57=cambria1 user-58=courseme user-59=eugincou user-60=hirefootballgame user-61=asandcoc user-62=sibtoncc user-63=steve user-64=zebrapho user-65=bwppodcast user-66=nsceres user-67=burydropin user-68=fawcettd user-69=dhyana user-70=eatspam user-71=darkstar user-72=beauty user-73=battlere user-74=oneoarco user-75=firstre2 user-76=vivienn1 user-77=brighto1 user-78=nstriton user-79=bemadonn user-80=ggaaorgu user-81=belle user-82=newstoda user-83=bedfords user-84=skyfirec user-85=alexadmin user-86=nativene user-87=askhform user-88=stuartge user-89=innovat1 user-90=opaiscyx user-91=coursemc user-92=firstres user-93=seftvta user-94=jonhartl user-95=ultbcrra user-96=southlon user-97=highlegh user-98=firstred user-99=costestimatorco user-100=clarkass user-101=firstrel user-102=carsinyo user-103=fetch
Sep 27 01:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=hubmaster user-105=elecleis user-106=gilpin user-107=milloyco user-108=thqkgnbz user-109=connectedshoppin user-110=ianrayne user-111=accooper user-112=sarafoundation user-113=atestord user-114=strathar user-115=brmrjxl user-116=lakesan1 user-117=musorguk user-118=megacards user-119=wilsonsw user-120=ptkxhsbt user-121=dickemery123 user-122=martsblo user-123=magichat user-124=lbhyisi user-125=hhdugcor user-126=maflemin user-127=lbscrmod user-128=connect9 user-129=athenare user-130=vantagep user-131=booff user-132=foundation user-133=markward user-134=ulsukarm user-135=hodgesonweb user-136=theblack user-137=spectrum user-138=jarvisin user-139=leereyn1 user-140=stephani user-141=still user-142=agproduc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 01:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 01:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:16 nativespace-cdp sudo[29049]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:16 nativespace-cdp sudo[29054]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-j50JEXHYpdzWsB3k.~
Sep 27 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:16 nativespace-cdp sudo[29057]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-j50JEXHYpdzWsB3k.~'
Sep 27 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:16 nativespace-cdp sudo[29061]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-j50JEXHYpdzWsB3k.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:16 nativespace-cdp sudo[29065]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 01:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:17 nativespace-cdp sudo[29068]: pam_unix(sudo:session): session closed for user root
Sep 27 01:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 01:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 01:10:24 nativespace-cdp sudo[29105]: pam_unix(sudo:session): session closed for user root
Sep 27 01:11:33 nativespace-cdp sshd[29319]: Connection closed by 159.100.136.21 port 47282 [preauth]
Sep 27 01:16:33 nativespace-cdp sshd[30619]: Connection closed by 159.100.136.21 port 57192 [preauth]
Sep 27 01:21:34 nativespace-cdp sshd[31554]: Connection closed by 159.100.136.21 port 38622 [preauth]
Sep 27 01:26:35 nativespace-cdp sshd[32535]: Connection closed by 159.100.136.21 port 48240 [preauth]
Sep 27 01:31:33 nativespace-cdp sshd[1516]: Connection closed by 159.100.136.21 port 57804 [preauth]
Sep 27 01:36:33 nativespace-cdp sshd[2450]: Connection closed by 159.100.136.21 port 39560 [preauth]
Sep 27 01:41:34 nativespace-cdp sshd[3549]: Connection closed by 159.100.136.21 port 49132 [preauth]
Sep 27 01:46:33 nativespace-cdp sshd[4812]: Connection closed by 159.100.136.21 port 59174 [preauth]
Sep 27 01:51:33 nativespace-cdp sshd[5858]: Connection closed by 159.100.136.21 port 40432 [preauth]
Sep 27 01:56:34 nativespace-cdp sshd[7351]: Connection closed by 159.100.136.21 port 50030 [preauth]
Sep 27 02:01:34 nativespace-cdp sshd[9509]: Connection closed by 159.100.136.21 port 59382 [preauth]
Sep 27 02:06:36 nativespace-cdp sshd[11321]: Connection closed by 159.100.136.21 port 41182 [preauth]
Sep 27 02:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 02:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:07 nativespace-cdp sudo[12570]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 02:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:07 nativespace-cdp sudo[12575]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 02:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:19 nativespace-cdp sudo[12579]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 02:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:19 nativespace-cdp sudo[12638]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 02:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:26 nativespace-cdp sudo[12642]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 02:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:26 nativespace-cdp sudo[12663]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 02:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:26 nativespace-cdp sudo[12666]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 02:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:26 nativespace-cdp sudo[12670]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 02:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:26 nativespace-cdp sudo[12674]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 02:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:26 nativespace-cdp sudo[12678]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 02:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:26 nativespace-cdp sudo[12681]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 02:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:29 nativespace-cdp sudo[12736]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 02:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:33 nativespace-cdp sudo[12742]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=careers user-2=nbhavers user-3=david user-4=chrisdal user-5=mcdermos user-6=jennimil user-7=tomandle user-8=romaldki user-9=hodgsonmail user-10=ranxterc user-11=outdoorc user-12=branko user-13=onlycont user-14=attlebor user-15=lucy user-16=bakery user-17=sosevalu user-18=crrtipdl user-19=boldover user-20=nove user-21=design user-22=ladburyp user-23=stagingerris user-24=dancinggardener user-25=kategilpin user-26=cath user-27=sketchy user-28=havantho user-29=nvihkvu user-30=tstardom user-31=oubpgvbx user-32=what user-33=steve user-34=bwppodcast user-35=zebrapho user-36=asandcoc user-37=sibtoncc user-38=dhyana user-39=beauty user-40=eatspam user-41=darkstar user-42=nsceres user-43=burydropin user-44=fawcettd user-45=hidden user-46=nomistakes user-47=tigerlet user-48=barbersh user-49=isleofwi
Sep 27 02:10:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=smrszyqg user-51=lkpier user-52=ctedorgu user-53=philmcph user-54=donnychicago user-55=firstre5 user-56=steakbridieme user-57=nscdp user-58=health2045 user-59=fortunaz user-60=leftie user-61=foods user-62=eugincou user-63=courseme user-64=hirefootballgame user-65=howardon user-66=pugwash user-67=paulmca1 user-68=cwsocial user-69=cathski user-70=cambria1 user-71=reliable user-72=ninejimm user-73=firstred user-74=southlon user-75=highlegh user-76=clarkass user-77=firstrel user-78=costestimatorco user-79=coursemc user-80=opaiscyx user-81=seftvta user-82=jonhartl user-83=ultbcrra user-84=firstres user-85=connectedshoppin user-86=thqkgnbz user-87=accooper user-88=ianrayne user-89=hubmaster user-90=carsinyo user-91=fetch user-92=gilpin user-93=milloyco user-94=elecleis user-95=ggaaorgu user-96=belle user-97=newstoda user-98=bemadonn user-99=bedfords user-100=firstre2 user-101=vivienn1 user-102=battlere
Sep 27 02:10:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=oneoarco user-104=brighto1 user-105=nstriton user-106=nativene user-107=innovat1 user-108=askhform user-109=stuartge user-110=alexadmin user-111=skyfirec user-112=ulsukarm user-113=connect9 user-114=athenare user-115=vantagep user-116=maflemin user-117=lbscrmod user-118=foundation user-119=booff user-120=markward user-121=stephani user-122=leereyn1 user-123=still user-124=agproduc user-125=spectrum user-126=hodgesonweb user-127=theblack user-128=jarvisin user-129=musorguk user-130=megacards user-131=wilsonsw user-132=strathar user-133=sarafoundation user-134=atestord user-135=brmrjxl user-136=lakesan1 user-137=magichat user-138=lbhyisi user-139=hhdugcor user-140=dickemery123 user-141=ptkxhsbt user-142=martsblo feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 02:10:33 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 02:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:37 nativespace-cdp sudo[12752]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 02:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:38 nativespace-cdp sudo[12765]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-h2O8HmRuWb78ktf7.~
Sep 27 02:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:38 nativespace-cdp sudo[12769]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-h2O8HmRuWb78ktf7.~'
Sep 27 02:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:38 nativespace-cdp sudo[12772]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-h2O8HmRuWb78ktf7.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 02:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:38 nativespace-cdp sudo[12776]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 02:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:38 nativespace-cdp sudo[12779]: pam_unix(sudo:session): session closed for user root
Sep 27 02:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 02:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 02:10:41 nativespace-cdp sudo[12802]: pam_unix(sudo:session): session closed for user root
Sep 27 02:11:34 nativespace-cdp sshd[12926]: Connection closed by 159.100.136.21 port 50942 [preauth]
Sep 27 02:16:33 nativespace-cdp sshd[14139]: Connection closed by 159.100.136.21 port 60936 [preauth]
Sep 27 02:21:33 nativespace-cdp sshd[15269]: Connection closed by 159.100.136.21 port 42112 [preauth]
Sep 27 02:26:34 nativespace-cdp sshd[16364]: Connection closed by 159.100.136.21 port 52138 [preauth]
Sep 27 02:31:33 nativespace-cdp sshd[17567]: Connection closed by 159.100.136.21 port 33328 [preauth]
Sep 27 02:36:33 nativespace-cdp sshd[18758]: Connection closed by 159.100.136.21 port 43306 [preauth]
Sep 27 02:41:33 nativespace-cdp sshd[19757]: Connection closed by 159.100.136.21 port 52902 [preauth]
Sep 27 02:46:08 nativespace-cdp sshd[20748]: Invalid user tuan from 179.41.2.183 port 41416
Sep 27 02:46:08 nativespace-cdp sshd[20748]: input_userauth_request: invalid user tuan [preauth]
Sep 27 02:46:08 nativespace-cdp sshd[20748]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 02:46:08 nativespace-cdp sshd[20748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.41.2.183
Sep 27 02:46:10 nativespace-cdp sshd[20748]: Failed password for invalid user tuan from 179.41.2.183 port 41416 ssh2
Sep 27 02:46:14 nativespace-cdp sshd[20748]: Received disconnect from 179.41.2.183 port 41416:11: Bye Bye [preauth]
Sep 27 02:46:14 nativespace-cdp sshd[20748]: Disconnected from 179.41.2.183 port 41416 [preauth]
Sep 27 02:46:22 nativespace-cdp sshd[20806]: Invalid user usuario from 89.46.223.35 port 59144
Sep 27 02:46:22 nativespace-cdp sshd[20806]: input_userauth_request: invalid user usuario [preauth]
Sep 27 02:46:22 nativespace-cdp sshd[20806]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 02:46:22 nativespace-cdp sshd[20806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.223.35
Sep 27 02:46:24 nativespace-cdp sshd[20806]: Failed password for invalid user usuario from 89.46.223.35 port 59144 ssh2
Sep 27 02:46:24 nativespace-cdp sshd[20806]: Received disconnect from 89.46.223.35 port 59144:11: Bye Bye [preauth]
Sep 27 02:46:24 nativespace-cdp sshd[20806]: Disconnected from 89.46.223.35 port 59144 [preauth]
Sep 27 02:49:39 nativespace-cdp sshd[21364]: Invalid user acer from 89.46.223.35 port 55612
Sep 27 02:49:39 nativespace-cdp sshd[21364]: input_userauth_request: invalid user acer [preauth]
Sep 27 02:49:39 nativespace-cdp sshd[21364]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 02:49:39 nativespace-cdp sshd[21364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.223.35
Sep 27 02:49:41 nativespace-cdp sshd[21364]: Failed password for invalid user acer from 89.46.223.35 port 55612 ssh2
Sep 27 02:49:41 nativespace-cdp sshd[21364]: Received disconnect from 89.46.223.35 port 55612:11: Bye Bye [preauth]
Sep 27 02:49:41 nativespace-cdp sshd[21364]: Disconnected from 89.46.223.35 port 55612 [preauth]
Sep 27 02:50:16 nativespace-cdp sshd[21659]: Invalid user sopuser from 89.46.223.35 port 56880
Sep 27 02:50:16 nativespace-cdp sshd[21659]: input_userauth_request: invalid user sopuser [preauth]
Sep 27 02:50:16 nativespace-cdp sshd[21659]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 02:50:16 nativespace-cdp sshd[21659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.223.35
Sep 27 02:50:17 nativespace-cdp sshd[21659]: Failed password for invalid user sopuser from 89.46.223.35 port 56880 ssh2
Sep 27 02:50:17 nativespace-cdp sshd[21659]: Received disconnect from 89.46.223.35 port 56880:11: Bye Bye [preauth]
Sep 27 02:50:17 nativespace-cdp sshd[21659]: Disconnected from 89.46.223.35 port 56880 [preauth]
Sep 27 02:51:33 nativespace-cdp sshd[21958]: Connection closed by 159.100.136.21 port 44096 [preauth]
Sep 27 02:56:04 nativespace-cdp sshd[22792]: Invalid user test from 179.41.2.183 port 53750
Sep 27 02:56:04 nativespace-cdp sshd[22792]: input_userauth_request: invalid user test [preauth]
Sep 27 02:56:04 nativespace-cdp sshd[22792]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 02:56:04 nativespace-cdp sshd[22792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.41.2.183
Sep 27 02:56:06 nativespace-cdp sshd[22792]: Failed password for invalid user test from 179.41.2.183 port 53750 ssh2
Sep 27 02:56:07 nativespace-cdp sshd[22792]: Received disconnect from 179.41.2.183 port 53750:11: Bye Bye [preauth]
Sep 27 02:56:07 nativespace-cdp sshd[22792]: Disconnected from 179.41.2.183 port 53750 [preauth]
Sep 27 02:56:33 nativespace-cdp sshd[22890]: Connection closed by 159.100.136.21 port 53300 [preauth]
Sep 27 02:59:15 nativespace-cdp sshd[23556]: Invalid user test_user from 179.41.2.183 port 51449
Sep 27 02:59:15 nativespace-cdp sshd[23556]: input_userauth_request: invalid user test_user [preauth]
Sep 27 02:59:16 nativespace-cdp sshd[23556]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 02:59:16 nativespace-cdp sshd[23556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.41.2.183
Sep 27 02:59:18 nativespace-cdp sshd[23556]: Failed password for invalid user test_user from 179.41.2.183 port 51449 ssh2
Sep 27 02:59:20 nativespace-cdp sshd[23556]: Received disconnect from 179.41.2.183 port 51449:11: Bye Bye [preauth]
Sep 27 02:59:20 nativespace-cdp sshd[23556]: Disconnected from 179.41.2.183 port 51449 [preauth]
Sep 27 03:01:34 nativespace-cdp sshd[24229]: Connection closed by 159.100.136.21 port 34114 [preauth]
Sep 27 03:06:34 nativespace-cdp sshd[25298]: Connection closed by 159.100.136.21 port 44204 [preauth]
Sep 27 03:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 03:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:01 nativespace-cdp sudo[25852]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 03:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:01 nativespace-cdp sudo[25855]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 03:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:14 nativespace-cdp sudo[25858]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 03:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:14 nativespace-cdp sudo[26010]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 03:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:24 nativespace-cdp sudo[26013]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 03:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:24 nativespace-cdp sudo[26059]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 03:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:24 nativespace-cdp sudo[26063]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 03:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:24 nativespace-cdp sudo[26066]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 03:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:24 nativespace-cdp sudo[26069]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 03:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:24 nativespace-cdp sudo[26072]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 03:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:24 nativespace-cdp sudo[26076]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 03:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:28 nativespace-cdp sudo[26138]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 03:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:32 nativespace-cdp sudo[26154]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=spectrum user-3=theblack user-4=hodgesonweb user-5=still user-6=agproduc user-7=stephani user-8=leereyn1 user-9=foundation user-10=booff user-11=markward user-12=connect9 user-13=athenare user-14=vantagep user-15=maflemin user-16=lbscrmod user-17=ulsukarm user-18=martsblo user-19=dickemery123 user-20=ptkxhsbt user-21=lbhyisi user-22=hhdugcor user-23=magichat user-24=brmrjxl user-25=lakesan1 user-26=strathar user-27=sarafoundation user-28=atestord user-29=wilsonsw user-30=musorguk user-31=megacards user-32=milloyco user-33=gilpin user-34=elecleis user-35=hubmaster user-36=carsinyo user-37=fetch user-38=accooper user-39=ianrayne user-40=connectedshoppin user-41=thqkgnbz user-42=seftvta user-43=jonhartl user-44=ultbcrra user-45=firstres user-46=opaiscyx user-47=coursemc
Sep 27 03:10:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=firstrel user-49=clarkass user-50=costestimatorco user-51=firstred user-52=southlon user-53=highlegh user-54=skyfirec user-55=alexadmin user-56=innovat1 user-57=askhform user-58=stuartge user-59=nativene user-60=brighto1 user-61=nstriton user-62=firstre2 user-63=vivienn1 user-64=battlere user-65=oneoarco user-66=bedfords user-67=ggaaorgu user-68=belle user-69=newstoda user-70=bemadonn user-71=burydropin user-72=fawcettd user-73=nsceres user-74=beauty user-75=eatspam user-76=darkstar user-77=dhyana user-78=asandcoc user-79=sibtoncc user-80=bwppodcast user-81=zebrapho user-82=steve user-83=cambria1 user-84=cathski user-85=ninejimm user-86=reliable user-87=pugwash user-88=howardon user-89=paulmca1 user-90=cwsocial user-91=hirefootballgame user-92=eugincou user-93=courseme user-94=nscdp user-95=health2045 user-96=fortunaz user-97=foods user-98=leftie user-99=lkpier user-100=philmcph user-101=ctedorgu
Sep 27 03:10:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=donnychicago user-103=firstre5 user-104=steakbridieme user-105=isleofwi user-106=smrszyqg user-107=hidden user-108=nomistakes user-109=barbersh user-110=tigerlet user-111=attlebor user-112=lucy user-113=onlycont user-114=ranxterc user-115=hodgsonmail user-116=outdoorc user-117=branko user-118=romaldki user-119=tomandle user-120=jennimil user-121=chrisdal user-122=mcdermos user-123=careers user-124=nbhavers user-125=david user-126=oubpgvbx user-127=tstardom user-128=what user-129=sketchy user-130=cath user-131=havantho user-132=nvihkvu user-133=ladburyp user-134=stagingerris user-135=dancinggardener user-136=kategilpin user-137=design user-138=nove user-139=boldover user-140=bakery user-141=sosevalu user-142=crrtipdl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 27 03:10:32 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 03:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:34 nativespace-cdp sudo[26193]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 03:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:35 nativespace-cdp sudo[26207]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PbUepO6mCYe5qHTv.~
Sep 27 03:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:35 nativespace-cdp sudo[26211]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PbUepO6mCYe5qHTv.~'
Sep 27 03:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:35 nativespace-cdp sudo[26214]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PbUepO6mCYe5qHTv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 03:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:35 nativespace-cdp sudo[26219]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 03:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:36 nativespace-cdp sudo[26222]: pam_unix(sudo:session): session closed for user root
Sep 27 03:10:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 03:10:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 03:10:51 nativespace-cdp sudo[26281]: pam_unix(sudo:session): session closed for user root
Sep 27 03:11:33 nativespace-cdp sshd[26437]: Connection closed by 159.100.136.21 port 53936 [preauth]
Sep 27 03:16:33 nativespace-cdp sshd[27664]: Connection closed by 159.100.136.21 port 35162 [preauth]
Sep 27 03:21:33 nativespace-cdp sshd[28965]: Connection closed by 159.100.136.21 port 44816 [preauth]
Sep 27 03:26:37 nativespace-cdp sshd[29957]: Connection closed by 159.100.136.21 port 54626 [preauth]
Sep 27 03:31:37 nativespace-cdp sshd[30978]: Connection closed by 159.100.136.21 port 35928 [preauth]
Sep 27 03:36:33 nativespace-cdp sshd[32142]: Connection closed by 159.100.136.21 port 45636 [preauth]
Sep 27 03:41:33 nativespace-cdp sshd[843]: Connection closed by 159.100.136.21 port 55126 [preauth]
Sep 27 03:46:37 nativespace-cdp sshd[2126]: Connection closed by 159.100.136.21 port 36176 [preauth]
Sep 27 03:51:33 nativespace-cdp sshd[3045]: Connection closed by 159.100.136.21 port 45754 [preauth]
Sep 27 03:56:34 nativespace-cdp sshd[3927]: Connection closed by 159.100.136.21 port 55238 [preauth]
Sep 27 04:01:36 nativespace-cdp sshd[5279]: Connection closed by 159.100.136.21 port 36080 [preauth]
Sep 27 04:06:33 nativespace-cdp sshd[6327]: Connection closed by 159.100.136.21 port 46076 [preauth]
Sep 27 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:09:59 nativespace-cdp sudo[6975]: pam_unix(sudo:session): session closed for user root
Sep 27 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:09:59 nativespace-cdp sudo[6978]: pam_unix(sudo:session): session closed for user root
Sep 27 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:12 nativespace-cdp sudo[6981]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 04:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:12 nativespace-cdp sudo[7130]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 04:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:22 nativespace-cdp sudo[7134]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 04:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:22 nativespace-cdp sudo[7223]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 04:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:22 nativespace-cdp sudo[7227]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 04:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:22 nativespace-cdp sudo[7230]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 04:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:23 nativespace-cdp sudo[7234]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 04:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:23 nativespace-cdp sudo[7238]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 04:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:23 nativespace-cdp sudo[7242]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 04:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:36 nativespace-cdp sudo[7293]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 04:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:36 nativespace-cdp sudo[7298]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nsceres user-2=burydropin user-3=fawcettd user-4=dhyana user-5=beauty user-6=eatspam user-7=darkstar user-8=sibtoncc user-9=asandcoc user-10=steve user-11=bwppodcast user-12=zebrapho user-13=pugwash user-14=paulmca1 user-15=howardon user-16=cwsocial user-17=cathski user-18=cambria1 user-19=ninejimm user-20=reliable user-21=eugincou user-22=courseme user-23=hirefootballgame user-24=lkpier user-25=philmcph user-26=ctedorgu user-27=steakbridieme user-28=firstre5 user-29=donnychicago user-30=nscdp user-31=health2045 user-32=fortunaz user-33=foods user-34=leftie user-35=hidden user-36=nomistakes user-37=tigerlet user-38=barbersh user-39=smrszyqg user-40=isleofwi user-41=onlycont user-42=attlebor user-43=lucy user-44=romaldki user-45=outdoorc user-46=hodgsonmail user-47=ranxterc user-48=branko
Sep 27 04:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jennimil user-50=tomandle user-51=careers user-52=nbhavers user-53=david user-54=chrisdal user-55=mcdermos user-56=cath user-57=sketchy user-58=havantho user-59=nvihkvu user-60=tstardom user-61=oubpgvbx user-62=what user-63=design user-64=ladburyp user-65=dancinggardener user-66=stagingerris user-67=kategilpin user-68=boldover user-69=nove user-70=bakery user-71=sosevalu user-72=crrtipdl user-73=spectrum user-74=theblack user-75=hodgesonweb user-76=jarvisin user-77=stephani user-78=leereyn1 user-79=still user-80=agproduc user-81=connect9 user-82=athenare user-83=vantagep user-84=maflemin user-85=lbscrmod user-86=markward user-87=booff user-88=foundation user-89=ulsukarm user-90=dickemery123 user-91=ptkxhsbt user-92=martsblo user-93=magichat user-94=lbhyisi user-95=hhdugcor user-96=strathar user-97=sarafoundation user-98=atestord user-99=lakesan1 user-100=brmrjxl user-101=musorguk user-102=megacards
Sep 27 04:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=wilsonsw user-104=hubmaster user-105=carsinyo user-106=fetch user-107=gilpin user-108=milloyco user-109=elecleis user-110=connectedshoppin user-111=thqkgnbz user-112=accooper user-113=ianrayne user-114=coursemc user-115=opaiscyx user-116=seftvta user-117=jonhartl user-118=ultbcrra user-119=firstres user-120=firstred user-121=southlon user-122=highlegh user-123=clarkass user-124=firstrel user-125=costestimatorco user-126=alexadmin user-127=skyfirec user-128=nativene user-129=innovat1 user-130=stuartge user-131=askhform user-132=firstre2 user-133=vivienn1 user-134=battlere user-135=oneoarco user-136=brighto1 user-137=nstriton user-138=belle user-139=ggaaorgu user-140=newstoda user-141=bemadonn user-142=bedfords feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 04:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 04:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:38 nativespace-cdp sudo[7304]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 04:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:40 nativespace-cdp sudo[7321]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nYc5oxMdDU0Mg7aH.~
Sep 27 04:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:40 nativespace-cdp sudo[7324]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nYc5oxMdDU0Mg7aH.~'
Sep 27 04:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:40 nativespace-cdp sudo[7327]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nYc5oxMdDU0Mg7aH.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 04:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:40 nativespace-cdp sudo[7332]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 04:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:40 nativespace-cdp sudo[7336]: pam_unix(sudo:session): session closed for user root
Sep 27 04:10:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 04:10:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:10:44 nativespace-cdp sudo[7362]: pam_unix(sudo:session): session closed for user root
Sep 27 04:11:33 nativespace-cdp sshd[7608]: Connection closed by 159.100.136.21 port 55504 [preauth]
Sep 27 04:16:34 nativespace-cdp sshd[8721]: Connection closed by 159.100.136.21 port 37224 [preauth]
Sep 27 04:21:34 nativespace-cdp sshd[9951]: Connection closed by 159.100.136.21 port 46848 [preauth]
Sep 27 04:26:33 nativespace-cdp sshd[10832]: Connection closed by 159.100.136.21 port 56868 [preauth]
Sep 27 04:31:34 nativespace-cdp sshd[12187]: Connection closed by 159.100.136.21 port 38450 [preauth]
Sep 27 04:36:32 nativespace-cdp sshd[13194]: Connection closed by 159.100.136.21 port 48250 [preauth]
Sep 27 04:41:33 nativespace-cdp sshd[14520]: Connection closed by 159.100.136.21 port 57154 [preauth]
Sep 27 04:46:32 nativespace-cdp sshd[17004]: Connection closed by 159.100.136.21 port 38960 [preauth]
Sep 27 04:51:33 nativespace-cdp sshd[18534]: Connection closed by 159.100.136.21 port 48358 [preauth]
Sep 27 04:56:34 nativespace-cdp sshd[19463]: Connection closed by 159.100.136.21 port 58094 [preauth]
Sep 27 04:56:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 04:56:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:56:59 nativespace-cdp sudo[19522]: pam_unix(sudo:session): session closed for user root
Sep 27 04:56:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 04:56:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:00 nativespace-cdp sudo[19533]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 04:57:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:07 nativespace-cdp sudo[19570]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=stuartge user-2=askhform user-3=innovat1 user-4=nativene user-5=skyfirec user-6=alexadmin user-7=bedfords user-8=bemadonn user-9=belle user-10=ggaaorgu user-11=newstoda user-12=brighto1 user-13=nstriton user-14=battlere user-15=oneoarco user-16=firstre2 user-17=vivienn1 user-18=ianrayne user-19=accooper user-20=thqkgnbz user-21=connectedshoppin user-22=elecleis user-23=gilpin user-24=milloyco user-25=carsinyo user-26=fetch user-27=hubmaster user-28=costestimatorco user-29=firstrel user-30=clarkass user-31=southlon user-32=highlegh user-33=firstred user-34=firstres user-35=seftvta user-36=jonhartl user-37=ultbcrra user-38=opaiscyx user-39=coursemc user-40=lbhyisi user-41=hhdugcor user-42=magichat user-43=martsblo user-44=ptkxhsbt user-45=dickemery123 user-46=wilsonsw user-47=musorguk
Sep 27 04:57:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=megacards user-49=brmrjxl user-50=lakesan1 user-51=sarafoundation user-52=atestord user-53=strathar user-54=still user-55=agproduc user-56=leereyn1 user-57=stephani user-58=jarvisin user-59=hodgesonweb user-60=theblack user-61=spectrum user-62=ulsukarm user-63=booff user-64=markward user-65=foundation user-66=maflemin user-67=lbscrmod user-68=athenare user-69=connect9 user-70=vantagep user-71=kategilpin user-72=ladburyp user-73=stagingerris user-74=dancinggardener user-75=design user-76=what user-77=tstardom user-78=oubpgvbx user-79=nvihkvu user-80=sketchy user-81=cath user-82=havantho user-83=sosevalu user-84=crrtipdl user-85=bakery user-86=nove user-87=boldover user-88=branko user-89=outdoorc user-90=ranxterc user-91=hodgsonmail user-92=romaldki user-93=attlebor user-94=lucy user-95=onlycont user-96=mcdermos user-97=chrisdal user-98=careers user-99=nbhavers user-100=david user-101=tomandle
Sep 27 04:57:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=jennimil user-103=hirefootballgame user-104=courseme user-105=eugincou user-106=reliable user-107=ninejimm user-108=cathski user-109=cambria1 user-110=paulmca1 user-111=pugwash user-112=howardon user-113=cwsocial user-114=isleofwi user-115=smrszyqg user-116=barbersh user-117=tigerlet user-118=hidden user-119=nomistakes user-120=health2045 user-121=fortunaz user-122=leftie user-123=foods user-124=nscdp user-125=ctedorgu user-126=philmcph user-127=firstre5 user-128=donnychicago user-129=steakbridieme user-130=lkpier user-131=eatspam user-132=darkstar user-133=beauty user-134=dhyana user-135=burydropin user-136=fawcettd user-137=nsceres user-138=zebrapho user-139=bwppodcast user-140=steve user-141=sibtoncc user-142=asandcoc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 27 04:57:07 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 04:57:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:09 nativespace-cdp sudo[19582]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 27 04:57:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:10 nativespace-cdp sudo[19591]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 27 04:57:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:11 nativespace-cdp sudo[19596]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 27 04:57:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 04:57:35 nativespace-cdp sudo[19695]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 04:57:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 27 04:57:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:37 nativespace-cdp sudo[19701]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 27 04:57:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:39 nativespace-cdp sudo[19715]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 27 04:57:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:46 nativespace-cdp sudo[19723]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 27 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:46 nativespace-cdp sudo[19744]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 27 04:57:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:48 nativespace-cdp sudo[19758]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 27 04:57:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:54 nativespace-cdp sudo[19764]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 27 04:57:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:55 nativespace-cdp sudo[19858]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 27 04:57:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:55 nativespace-cdp sudo[19863]: pam_unix(sudo:session): session closed for user root
Sep 27 04:57:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 27 04:57:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:57:59 nativespace-cdp sudo[19930]: pam_unix(sudo:session): session closed for user root
Sep 27 04:58:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 27 04:58:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 04:58:03 nativespace-cdp sudo[20006]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 04:58:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 27 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 27 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 27 04:58:03 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 04:58:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 04:58:04 nativespace-cdp sudo[20012]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 04:58:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 27 04:58:04 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 27 04:58:04 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 27 04:58:04 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 04:58:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 04:58:05 nativespace-cdp sudo[20020]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 04:58:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 27 04:58:05 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 27 04:58:05 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 27 04:58:05 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 04:58:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 04:58:07 nativespace-cdp sudo[20027]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 27 04:58:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 04:58:17 nativespace-cdp sudo[20145]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 04:58:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 04:58:17 nativespace-cdp sudo[20152]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 04:58:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 04:58:17 nativespace-cdp sudo[20158]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 27 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 04:58:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 04:58:17 nativespace-cdp sudo[20164]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 04:58:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 27 04:58:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:58:20 nativespace-cdp sudo[20198]: pam_unix(sudo:session): session closed for user root
Sep 27 04:58:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 27 04:58:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:58:20 nativespace-cdp sudo[20205]: pam_unix(sudo:session): session closed for user root
Sep 27 04:59:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 27 04:59:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 04:59:43 nativespace-cdp sudo[20668]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 04:59:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 27 04:59:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:59:45 nativespace-cdp sudo[20675]: pam_unix(sudo:session): session closed for user root
Sep 27 04:59:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 27 04:59:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:59:45 nativespace-cdp sudo[20680]: pam_unix(sudo:session): session closed for user root
Sep 27 04:59:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 27 04:59:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:59:48 nativespace-cdp sudo[20685]: pam_unix(sudo:session): session closed for user root
Sep 27 04:59:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 27 04:59:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:59:48 nativespace-cdp sudo[20697]: pam_unix(sudo:session): session closed for user root
Sep 27 04:59:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 27 04:59:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:59:54 nativespace-cdp sudo[20714]: pam_unix(sudo:session): session closed for user root
Sep 27 04:59:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 27 04:59:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 04:59:54 nativespace-cdp sudo[20724]: pam_unix(sudo:session): session closed for user root
Sep 27 05:00:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 27 05:00:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:00:09 nativespace-cdp sudo[20988]: pam_unix(sudo:session): session closed for user root
Sep 27 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 27 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:00:12 nativespace-cdp sudo[21053]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 27 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 27 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 27 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:00:12 nativespace-cdp sudo[21059]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 27 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 27 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 27 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:00:35 nativespace-cdp sudo[21065]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:00:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 27 05:00:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:00:58 nativespace-cdp sudo[21360]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:00:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 27 05:00:58 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 27 05:00:58 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 27 05:00:58 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:00:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:00:58 nativespace-cdp sudo[21368]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:00:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 27 05:00:58 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 27 05:00:58 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 27 05:00:58 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:00:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:00:58 nativespace-cdp sudo[21376]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:01:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 27 05:01:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:01:03 nativespace-cdp sudo[21433]: pam_unix(sudo:session): session closed for user root
Sep 27 05:01:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 27 05:01:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:01:04 nativespace-cdp sudo[21474]: pam_unix(sudo:session): session closed for user root
Sep 27 05:01:37 nativespace-cdp sshd[21746]: Connection closed by 159.100.136.21 port 39548 [preauth]
Sep 27 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 27 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 05:01:49 nativespace-cdp sudo[21798]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 27 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:01:50 nativespace-cdp sudo[21804]: pam_unix(sudo:session): session closed for user root
Sep 27 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 27 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:01:51 nativespace-cdp sudo[21809]: pam_unix(sudo:session): session closed for user root
Sep 27 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 27 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:01:51 nativespace-cdp sudo[21813]: pam_unix(sudo:session): session closed for user root
Sep 27 05:01:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 27 05:01:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:01:52 nativespace-cdp sudo[21827]: pam_unix(sudo:session): session closed for user root
Sep 27 05:01:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 27 05:01:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:01:52 nativespace-cdp sudo[21833]: pam_unix(sudo:session): session closed for user root
Sep 27 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 27 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:02:01 nativespace-cdp sudo[21917]: pam_unix(sudo:session): session closed for user root
Sep 27 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 27 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 05:02:04 nativespace-cdp sudo[21983]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 27 05:02:04 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 27 05:02:04 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 27 05:02:04 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 05:02:05 nativespace-cdp sudo[21990]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 27 05:02:05 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 27 05:02:05 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 27 05:02:05 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 05:02:18 nativespace-cdp sudo[21997]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 27 05:02:18 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 27 05:02:18 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 27 05:02:18 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 05:02:19 nativespace-cdp sudo[22036]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 27 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 05:02:27 nativespace-cdp sudo[22143]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 05:02:27 nativespace-cdp sudo[22149]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 05:02:27 nativespace-cdp sudo[22155]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 27 05:02:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 05:02:27 nativespace-cdp sudo[22162]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 27 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:02:30 nativespace-cdp sudo[22197]: pam_unix(sudo:session): session closed for user root
Sep 27 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 27 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:02:31 nativespace-cdp sudo[22201]: pam_unix(sudo:session): session closed for user root
Sep 27 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 27 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:02:32 nativespace-cdp sudo[22216]: pam_unix(sudo:session): session closed for user root
Sep 27 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 27 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:02:32 nativespace-cdp sudo[22222]: pam_unix(sudo:session): session closed for user root
Sep 27 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 27 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 27 05:02:33 nativespace-cdp sudo[22234]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 27 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 27 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:02:33 nativespace-cdp sudo[22240]: pam_unix(sudo:session): session closed for user root
Sep 27 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 27 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:02:34 nativespace-cdp sudo[22245]: pam_unix(sudo:session): session closed for user root
Sep 27 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 27 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:02:34 nativespace-cdp sudo[22249]: pam_unix(sudo:session): session closed for user root
Sep 27 05:03:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 27 05:03:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:03:17 nativespace-cdp sudo[22397]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 27 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:03:19 nativespace-cdp sudo[22403]: pam_unix(sudo:session): session closed for user root
Sep 27 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 27 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:03:19 nativespace-cdp sudo[22408]: pam_unix(sudo:session): session closed for user root
Sep 27 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 27 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:03:21 nativespace-cdp sudo[22423]: pam_unix(sudo:session): session closed for user root
Sep 27 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 27 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:03:26 nativespace-cdp sudo[22491]: pam_unix(sudo:session): session closed for user root
Sep 27 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 27 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:03:29 nativespace-cdp sudo[22548]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 27 05:03:29 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 27 05:03:29 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 27 05:03:29 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:03:30 nativespace-cdp sudo[22554]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 27 05:03:30 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 27 05:03:30 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 27 05:03:30 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:03:44 nativespace-cdp sudo[22561]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 27 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:03:52 nativespace-cdp sudo[22709]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 27 05:03:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 27 05:03:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 27 05:03:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:03:52 nativespace-cdp sudo[22715]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 27 05:03:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 27 05:03:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 27 05:03:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 27 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 05:03:52 nativespace-cdp sudo[22721]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 27 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:03:55 nativespace-cdp sudo[22755]: pam_unix(sudo:session): session closed for user root
Sep 27 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 27 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:03:55 nativespace-cdp sudo[22762]: pam_unix(sudo:session): session closed for user root
Sep 27 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 27 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 27 05:04:43 nativespace-cdp sudo[22924]: pam_unix(sudo:session): session closed for user fortunaz
Sep 27 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 27 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:04:44 nativespace-cdp sudo[22932]: pam_unix(sudo:session): session closed for user root
Sep 27 05:04:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 27 05:04:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:04:44 nativespace-cdp sudo[22937]: pam_unix(sudo:session): session closed for user root
Sep 27 05:04:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 27 05:04:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:04:44 nativespace-cdp sudo[22942]: pam_unix(sudo:session): session closed for user root
Sep 27 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 27 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:04:47 nativespace-cdp sudo[22960]: pam_unix(sudo:session): session closed for user root
Sep 27 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 27 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:04:47 nativespace-cdp sudo[22965]: pam_unix(sudo:session): session closed for user root
Sep 27 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 27 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:04:52 nativespace-cdp sudo[23025]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=stuartge WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "MainWP Dashboard" on ONE | OAR (https://oneoar.co.uk). Installed version: 4.5.3.2. Available version: 5.2.2.<br/><br/>2. Plugin "UpdraftPlus - Backup/Restore" on ONE | OAR (https://oneoar.co.uk). Installed version: 1.23.13. Available version: 1.24.6.<br/><br/>3. Plugin "UpdraftPlus - Backup/Restore" on Pinstripe Inventories (https://pinstripe.services). Installed version: 1.24.1. Available version: 1.24.6.<br/><br/>' installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html"
Sep 27 05:05:07 nativespace-cdp sudo: wp-toolkit : (command continued) (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 27 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:08 nativespace-cdp sudo[23308]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23574]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23577]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23580]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23583]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23586]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23590]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23593]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23597]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23600]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:56 nativespace-cdp sudo[23603]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23608]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23611]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23615]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23619]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23623]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23626]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23629]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23633]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23636]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23640]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23643]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23646]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23649]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23652]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23655]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23658]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23661]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23664]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23668]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23671]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23674]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23678]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23681]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:57 nativespace-cdp sudo[23684]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23687]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23690]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23693]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23696]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23699]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23702]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23705]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23708]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23711]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23714]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23717]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23720]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23723]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23726]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23729]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23732]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23735]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23739]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23742]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23746]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23749]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23752]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23755]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23758]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:58 nativespace-cdp sudo[23761]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23764]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23767]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23770]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23773]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23776]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23779]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23782]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23785]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23788]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23791]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23794]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23797]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23800]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23803]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23806]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23809]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23812]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23815]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23819]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23822]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23825]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23828]: pam_unix(sudo:session): session closed for user root
Sep 27 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:05:59 nativespace-cdp sudo[23831]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23834]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23837]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23840]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23843]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23846]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23849]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23852]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23855]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23858]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23861]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23864]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23867]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23870]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23873]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23876]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23879]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23882]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23886]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23889]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23893]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23896]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 27 05:06:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:00 nativespace-cdp sudo[23899]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23902]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23905]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23908]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23911]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23914]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23917]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23920]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23923]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23926]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23929]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23932]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23935]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23938]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23941]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23944]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23947]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23950]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23953]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23956]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23959]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23962]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23977]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23980]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23983]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23986]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23989]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23992]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:06:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:01 nativespace-cdp sudo[23996]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[23999]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24002]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24005]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24008]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24011]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24014]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24017]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24020]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24023]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24026]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24029]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24032]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24035]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24038]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24041]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24044]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24047]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24051]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24054]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24057]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24060]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24063]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24066]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24069]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24072]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24076]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24079]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24082]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24085]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24088]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24091]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24094]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:06:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:02 nativespace-cdp sudo[24097]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24100]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24105]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24108]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24111]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24114]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24117]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24120]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24123]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24126]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24129]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24132]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24135]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24138]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24141]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24144]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24147]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24150]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24154]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24158]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24161]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24164]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24167]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24170]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:03 nativespace-cdp sudo[24173]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24177]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24180]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24183]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24186]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24189]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24192]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24195]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24198]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24201]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24204]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24207]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24210]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24213]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24216]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24219]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24222]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24225]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24228]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24231]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24234]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24237]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24240]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24243]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24246]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24250]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24253]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24256]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24259]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24262]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 27 05:06:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:04 nativespace-cdp sudo[24265]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 27 05:06:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:05 nativespace-cdp sudo[24268]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 27 05:06:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:05 nativespace-cdp sudo[24271]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 27 05:06:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:05 nativespace-cdp sudo[24274]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 27 05:06:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:05 nativespace-cdp sudo[24277]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 27 05:06:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:05 nativespace-cdp sudo[24280]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 27 05:06:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:06:05 nativespace-cdp sudo[24283]: pam_unix(sudo:session): session closed for user root
Sep 27 05:06:35 nativespace-cdp sshd[24440]: Connection closed by 159.100.136.21 port 49336 [preauth]
Sep 27 05:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 05:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:09:58 nativespace-cdp sudo[24895]: pam_unix(sudo:session): session closed for user root
Sep 27 05:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 05:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:09:58 nativespace-cdp sudo[24898]: pam_unix(sudo:session): session closed for user root
Sep 27 05:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 05:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:00 nativespace-cdp sudo[24901]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 05:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:00 nativespace-cdp sudo[24907]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 05:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:06 nativespace-cdp sudo[24911]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:06 nativespace-cdp sudo[25053]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:06 nativespace-cdp sudo[25057]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:06 nativespace-cdp sudo[25060]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:06 nativespace-cdp sudo[25063]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:06 nativespace-cdp sudo[25066]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:06 nativespace-cdp sudo[25069]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 05:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:09 nativespace-cdp sudo[25082]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 05:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:16 nativespace-cdp sudo[25086]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=magichat user-2=hhdugcor user-3=lbhyisi user-4=dickemery123 user-5=ptkxhsbt user-6=martsblo user-7=megacards user-8=musorguk user-9=wilsonsw user-10=strathar user-11=atestord user-12=sarafoundation user-13=lakesan1 user-14=brmrjxl user-15=stephani user-16=leereyn1 user-17=agproduc user-18=still user-19=spectrum user-20=hodgesonweb user-21=theblack user-22=jarvisin user-23=ulsukarm user-24=vantagep user-25=athenare user-26=connect9 user-27=lbscrmod user-28=maflemin user-29=booff user-30=markward user-31=foundation user-32=nativene user-33=innovat1 user-34=askhform user-35=stuartge user-36=alexadmin user-37=skyfirec user-38=newstoda user-39=ggaaorgu user-40=belle user-41=bemadonn user-42=bedfords user-43=vivienn1 user-44=firstre2 user-45=oneoarco user-46=battlere user-47=nstriton user-48=brighto1
Sep 27 05:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=connectedshoppin user-50=thqkgnbz user-51=accooper user-52=ianrayne user-53=hubmaster user-54=fetch user-55=carsinyo user-56=milloyco user-57=gilpin user-58=elecleis user-59=firstred user-60=highlegh user-61=southlon user-62=clarkass user-63=firstrel user-64=costestimatorco user-65=opaiscyx user-66=coursemc user-67=ultbcrra user-68=jonhartl user-69=seftvta user-70=firstres user-71=eugincou user-72=courseme user-73=hirefootballgame user-74=cwsocial user-75=paulmca1 user-76=howardon user-77=pugwash user-78=cambria1 user-79=cathski user-80=ninejimm user-81=reliable user-82=nomistakes user-83=hidden user-84=tigerlet user-85=barbersh user-86=isleofwi user-87=smrszyqg user-88=lkpier user-89=firstre5 user-90=donnychicago user-91=steakbridieme user-92=ctedorgu user-93=philmcph user-94=nscdp user-95=leftie user-96=foods user-97=fortunaz user-98=health2045 user-99=dhyana user-100=beauty user-101=darkstar
Sep 27 05:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eatspam user-103=nsceres user-104=fawcettd user-105=burydropin user-106=steve user-107=bwppodcast user-108=zebrapho user-109=asandcoc user-110=sibtoncc user-111=design user-112=dancinggardener user-113=stagingerris user-114=ladburyp user-115=kategilpin user-116=havantho user-117=cath user-118=sketchy user-119=nvihkvu user-120=oubpgvbx user-121=tstardom user-122=what user-123=bakery user-124=crrtipdl user-125=sosevalu user-126=boldover user-127=nove user-128=romaldki user-129=ranxterc user-130=outdoorc user-131=hodgsonmail user-132=branko user-133=onlycont user-134=lucy user-135=attlebor user-136=david user-137=careers user-138=nbhavers user-139=chrisdal user-140=mcdermos user-141=jennimil user-142=tomandle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 05:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 05:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:18 nativespace-cdp sudo[25104]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 05:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:19 nativespace-cdp sudo[25116]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UIfAfSpcvhC8rSJn.~
Sep 27 05:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:19 nativespace-cdp sudo[25119]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UIfAfSpcvhC8rSJn.~'
Sep 27 05:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:19 nativespace-cdp sudo[25122]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UIfAfSpcvhC8rSJn.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 05:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:19 nativespace-cdp sudo[25126]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 05:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:19 nativespace-cdp sudo[25129]: pam_unix(sudo:session): session closed for user root
Sep 27 05:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 05:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:10:21 nativespace-cdp sudo[25147]: pam_unix(sudo:session): session closed for user root
Sep 27 05:11:34 nativespace-cdp sshd[25465]: Connection closed by 159.100.136.21 port 58778 [preauth]
Sep 27 05:16:35 nativespace-cdp sshd[26503]: Connection closed by 159.100.136.21 port 39418 [preauth]
Sep 27 05:21:33 nativespace-cdp sshd[27812]: Connection closed by 159.100.136.21 port 48610 [preauth]
Sep 27 05:26:33 nativespace-cdp sshd[28916]: Connection closed by 159.100.136.21 port 57868 [preauth]
Sep 27 05:31:33 nativespace-cdp sshd[30317]: Connection closed by 159.100.136.21 port 39022 [preauth]
Sep 27 05:35:27 nativespace-cdp su: pam_unix(su:session): session opened for user courseme by (uid=0)
Sep 27 05:35:28 nativespace-cdp su[31230]: pam_unix(su:session): session closed for user courseme
Sep 27 05:36:34 nativespace-cdp sshd[31596]: Connection closed by 159.100.136.21 port 48852 [preauth]
Sep 27 05:39:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 05:39:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 05:39:21 nativespace-cdp sudo[32034]: pam_unix(sudo:session): session closed for user root
Sep 27 05:41:33 nativespace-cdp sshd[32623]: Connection closed by 159.100.136.21 port 58550 [preauth]
Sep 27 05:46:33 nativespace-cdp sshd[1407]: Connection closed by 159.100.136.21 port 40220 [preauth]
Sep 27 05:51:33 nativespace-cdp sshd[2614]: Connection closed by 159.100.136.21 port 49762 [preauth]
Sep 27 05:54:45 nativespace-cdp sshd[3130]: Invalid user koha from 47.238.179.52 port 48272
Sep 27 05:54:45 nativespace-cdp sshd[3130]: input_userauth_request: invalid user koha [preauth]
Sep 27 05:54:46 nativespace-cdp sshd[3130]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 05:54:46 nativespace-cdp sshd[3130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.238.179.52
Sep 27 05:54:48 nativespace-cdp sshd[3130]: Failed password for invalid user koha from 47.238.179.52 port 48272 ssh2
Sep 27 05:54:53 nativespace-cdp sshd[3130]: Received disconnect from 47.238.179.52 port 48272:11: Bye Bye [preauth]
Sep 27 05:54:53 nativespace-cdp sshd[3130]: Disconnected from 47.238.179.52 port 48272 [preauth]
Sep 27 05:56:33 nativespace-cdp sshd[3605]: Connection closed by 159.100.136.21 port 59182 [preauth]
Sep 27 05:59:11 nativespace-cdp sshd[4201]: Invalid user payara from 47.238.179.52 port 48748
Sep 27 05:59:11 nativespace-cdp sshd[4201]: input_userauth_request: invalid user payara [preauth]
Sep 27 05:59:11 nativespace-cdp sshd[4201]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 05:59:11 nativespace-cdp sshd[4201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.238.179.52
Sep 27 05:59:13 nativespace-cdp sshd[4201]: Failed password for invalid user payara from 47.238.179.52 port 48748 ssh2
Sep 27 05:59:19 nativespace-cdp sshd[4201]: Received disconnect from 47.238.179.52 port 48748:11: Bye Bye [preauth]
Sep 27 05:59:19 nativespace-cdp sshd[4201]: Disconnected from 47.238.179.52 port 48748 [preauth]
Sep 27 05:59:24 nativespace-cdp sshd[4329]: Invalid user postgres from 47.238.179.52 port 40584
Sep 27 05:59:24 nativespace-cdp sshd[4329]: input_userauth_request: invalid user postgres [preauth]
Sep 27 05:59:24 nativespace-cdp sshd[4329]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 05:59:24 nativespace-cdp sshd[4329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.238.179.52
Sep 27 05:59:26 nativespace-cdp sshd[4329]: Failed password for invalid user postgres from 47.238.179.52 port 40584 ssh2
Sep 27 05:59:26 nativespace-cdp sshd[4329]: Received disconnect from 47.238.179.52 port 40584:11: Bye Bye [preauth]
Sep 27 05:59:26 nativespace-cdp sshd[4329]: Disconnected from 47.238.179.52 port 40584 [preauth]
Sep 27 06:01:35 nativespace-cdp sshd[4985]: Connection closed by 159.100.136.21 port 40194 [preauth]
Sep 27 06:03:39 nativespace-cdp sshd[5294]: Connection closed by 103.193.178.227 port 59822 [preauth]
Sep 27 06:05:58 nativespace-cdp sshd[5785]: Invalid user test from 64.227.166.140 port 58144
Sep 27 06:05:58 nativespace-cdp sshd[5785]: input_userauth_request: invalid user test [preauth]
Sep 27 06:05:58 nativespace-cdp sshd[5785]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 06:05:58 nativespace-cdp sshd[5785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.166.140
Sep 27 06:06:00 nativespace-cdp sshd[5785]: Failed password for invalid user test from 64.227.166.140 port 58144 ssh2
Sep 27 06:06:00 nativespace-cdp sshd[5785]: Received disconnect from 64.227.166.140 port 58144:11: Bye Bye [preauth]
Sep 27 06:06:00 nativespace-cdp sshd[5785]: Disconnected from 64.227.166.140 port 58144 [preauth]
Sep 27 06:06:33 nativespace-cdp sshd[5873]: Connection closed by 159.100.136.21 port 49696 [preauth]
Sep 27 06:07:32 nativespace-cdp sshd[6434]: Invalid user usuario from 64.227.166.140 port 60480
Sep 27 06:07:32 nativespace-cdp sshd[6434]: input_userauth_request: invalid user usuario [preauth]
Sep 27 06:07:32 nativespace-cdp sshd[6434]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 06:07:32 nativespace-cdp sshd[6434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.166.140
Sep 27 06:07:34 nativespace-cdp sshd[6434]: Failed password for invalid user usuario from 64.227.166.140 port 60480 ssh2
Sep 27 06:07:35 nativespace-cdp sshd[6434]: Received disconnect from 64.227.166.140 port 60480:11: Bye Bye [preauth]
Sep 27 06:07:35 nativespace-cdp sshd[6434]: Disconnected from 64.227.166.140 port 60480 [preauth]
Sep 27 06:08:25 nativespace-cdp sshd[6719]: Invalid user tuan from 64.227.166.140 port 38624
Sep 27 06:08:25 nativespace-cdp sshd[6719]: input_userauth_request: invalid user tuan [preauth]
Sep 27 06:08:25 nativespace-cdp sshd[6719]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 06:08:25 nativespace-cdp sshd[6719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.166.140
Sep 27 06:08:27 nativespace-cdp sshd[6719]: Failed password for invalid user tuan from 64.227.166.140 port 38624 ssh2
Sep 27 06:08:27 nativespace-cdp sshd[6719]: Received disconnect from 64.227.166.140 port 38624:11: Bye Bye [preauth]
Sep 27 06:08:27 nativespace-cdp sshd[6719]: Disconnected from 64.227.166.140 port 38624 [preauth]
Sep 27 06:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 06:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:00 nativespace-cdp sudo[7005]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 06:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:00 nativespace-cdp sudo[7009]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 06:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:16 nativespace-cdp sudo[7013]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 06:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:16 nativespace-cdp sudo[7170]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 06:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:26 nativespace-cdp sudo[7174]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 06:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:27 nativespace-cdp sudo[7248]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 06:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:27 nativespace-cdp sudo[7251]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 06:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:27 nativespace-cdp sudo[7254]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 06:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:27 nativespace-cdp sudo[7257]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 06:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:27 nativespace-cdp sudo[7260]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 06:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:27 nativespace-cdp sudo[7263]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 06:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:33 nativespace-cdp sudo[7288]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 06:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:37 nativespace-cdp sudo[7294]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=barbersh user-2=tigerlet user-3=hidden user-4=nomistakes user-5=isleofwi user-6=smrszyqg user-7=philmcph user-8=ctedorgu user-9=firstre5 user-10=donnychicago user-11=steakbridieme user-12=lkpier user-13=fortunaz user-14=health2045 user-15=foods user-16=leftie user-17=nscdp user-18=courseme user-19=eugincou user-20=hirefootballgame user-21=paulmca1 user-22=pugwash user-23=howardon user-24=cwsocial user-25=reliable user-26=ninejimm user-27=cambria1 user-28=cathski user-29=steve user-30=zebrapho user-31=bwppodcast user-32=asandcoc user-33=sibtoncc user-34=dhyana user-35=eatspam user-36=darkstar user-37=beauty user-38=nsceres user-39=burydropin user-40=fawcettd user-41=sosevalu user-42=crrtipdl user-43=bakery user-44=boldover user-45=nove user-46=design user-47=kategilpin user-48=ladburyp
Sep 27 06:10:37 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=dancinggardener user-50=stagingerris user-51=nvihkvu user-52=sketchy user-53=cath user-54=havantho user-55=what user-56=tstardom user-57=oubpgvbx user-58=nbhavers user-59=careers user-60=david user-61=mcdermos user-62=chrisdal user-63=jennimil user-64=tomandle user-65=romaldki user-66=branko user-67=outdoorc user-68=ranxterc user-69=hodgsonmail user-70=onlycont user-71=attlebor user-72=lucy user-73=musorguk user-74=megacards user-75=wilsonsw user-76=sarafoundation user-77=atestord user-78=strathar user-79=brmrjxl user-80=lakesan1 user-81=magichat user-82=lbhyisi user-83=hhdugcor user-84=ptkxhsbt user-85=dickemery123 user-86=martsblo user-87=ulsukarm user-88=maflemin user-89=lbscrmod user-90=athenare user-91=connect9 user-92=vantagep user-93=foundation user-94=markward user-95=booff user-96=leereyn1 user-97=stephani user-98=still user-99=agproduc user-100=theblack user-101=hodgesonweb user-102=spectrum
Sep 27 06:10:37 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=jarvisin user-104=bemadonn user-105=belle user-106=ggaaorgu user-107=newstoda user-108=bedfords user-109=battlere user-110=oneoarco user-111=firstre2 user-112=vivienn1 user-113=brighto1 user-114=nstriton user-115=nativene user-116=askhform user-117=stuartge user-118=innovat1 user-119=skyfirec user-120=alexadmin user-121=southlon user-122=highlegh user-123=firstred user-124=costestimatorco user-125=firstrel user-126=clarkass user-127=opaiscyx user-128=coursemc user-129=firstres user-130=seftvta user-131=jonhartl user-132=ultbcrra user-133=thqkgnbz user-134=connectedshoppin user-135=ianrayne user-136=accooper user-137=carsinyo user-138=fetch user-139=hubmaster user-140=elecleis user-141=gilpin user-142=milloyco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 06:10:37 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 06:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:40 nativespace-cdp sudo[7302]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 06:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:41 nativespace-cdp sudo[7322]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bIIMXETR8FrkpAmo.~
Sep 27 06:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:41 nativespace-cdp sudo[7325]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bIIMXETR8FrkpAmo.~'
Sep 27 06:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:41 nativespace-cdp sudo[7328]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bIIMXETR8FrkpAmo.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 06:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:41 nativespace-cdp sudo[7332]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 06:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:41 nativespace-cdp sudo[7335]: pam_unix(sudo:session): session closed for user root
Sep 27 06:10:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 06:10:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 06:10:43 nativespace-cdp sudo[7353]: pam_unix(sudo:session): session closed for user root
Sep 27 06:11:33 nativespace-cdp sshd[7459]: Connection closed by 159.100.136.21 port 59020 [preauth]
Sep 27 06:16:33 nativespace-cdp sshd[8495]: Connection closed by 159.100.136.21 port 39870 [preauth]
Sep 27 06:21:33 nativespace-cdp sshd[9723]: Connection closed by 159.100.136.21 port 49410 [preauth]
Sep 27 06:26:33 nativespace-cdp sshd[10736]: Connection closed by 159.100.136.21 port 59336 [preauth]
Sep 27 06:31:34 nativespace-cdp sshd[12077]: Connection closed by 159.100.136.21 port 39354 [preauth]
Sep 27 06:31:53 nativespace-cdp sshd[12127]: Did not receive identification string from 162.142.125.216 port 59480
Sep 27 06:32:12 nativespace-cdp sshd[12225]: Connection closed by 162.142.125.216 port 59554 [preauth]
Sep 27 06:36:33 nativespace-cdp sshd[13071]: Connection closed by 159.100.136.21 port 48968 [preauth]
Sep 27 06:41:34 nativespace-cdp sshd[14068]: Connection closed by 159.100.136.21 port 58188 [preauth]
Sep 27 06:46:33 nativespace-cdp sshd[15260]: Connection closed by 159.100.136.21 port 37404 [preauth]
Sep 27 06:51:33 nativespace-cdp sshd[16471]: Connection closed by 159.100.136.21 port 46290 [preauth]
Sep 27 06:56:33 nativespace-cdp sshd[17399]: Connection closed by 159.100.136.21 port 55742 [preauth]
Sep 27 07:01:33 nativespace-cdp sshd[18866]: Connection closed by 159.100.136.21 port 36576 [preauth]
Sep 27 07:06:33 nativespace-cdp sshd[20138]: Connection closed by 159.100.136.21 port 46154 [preauth]
Sep 27 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:09:59 nativespace-cdp sudo[20828]: pam_unix(sudo:session): session closed for user root
Sep 27 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:09:59 nativespace-cdp sudo[20832]: pam_unix(sudo:session): session closed for user root
Sep 27 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:06 nativespace-cdp sudo[20835]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 07:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:06 nativespace-cdp sudo[20960]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 07:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:11 nativespace-cdp sudo[20967]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:11 nativespace-cdp sudo[20992]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:11 nativespace-cdp sudo[20995]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:11 nativespace-cdp sudo[20998]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:11 nativespace-cdp sudo[21001]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:11 nativespace-cdp sudo[21004]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:11 nativespace-cdp sudo[21007]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 07:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:14 nativespace-cdp sudo[21020]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 07:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:21 nativespace-cdp sudo[21024]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=strathar user-2=sarafoundation user-3=atestord user-4=lakesan1 user-5=brmrjxl user-6=musorguk user-7=megacards user-8=wilsonsw user-9=dickemery123 user-10=ptkxhsbt user-11=martsblo user-12=magichat user-13=lbhyisi user-14=hhdugcor user-15=connect9 user-16=athenare user-17=vantagep user-18=maflemin user-19=lbscrmod user-20=booff user-21=markward user-22=foundation user-23=ulsukarm user-24=spectrum user-25=theblack user-26=hodgesonweb user-27=jarvisin user-28=stephani user-29=leereyn1 user-30=still user-31=agproduc user-32=firstre2 user-33=vivienn1 user-34=battlere user-35=oneoarco user-36=brighto1 user-37=nstriton user-38=ggaaorgu user-39=belle user-40=newstoda user-41=bemadonn user-42=bedfords user-43=alexadmin user-44=skyfirec user-45=nativene user-46=innovat1 user-47=askhform user-48=stuartge
Sep 27 07:10:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=opaiscyx user-50=coursemc user-51=jonhartl user-52=seftvta user-53=ultbcrra user-54=firstres user-55=firstred user-56=southlon user-57=highlegh user-58=firstrel user-59=clarkass user-60=costestimatorco user-61=hubmaster user-62=carsinyo user-63=fetch user-64=milloyco user-65=gilpin user-66=elecleis user-67=connectedshoppin user-68=thqkgnbz user-69=accooper user-70=ianrayne user-71=lkpier user-72=ctedorgu user-73=philmcph user-74=firstre5 user-75=donnychicago user-76=steakbridieme user-77=nscdp user-78=fortunaz user-79=health2045 user-80=foods user-81=leftie user-82=hidden user-83=nomistakes user-84=barbersh user-85=tigerlet user-86=smrszyqg user-87=isleofwi user-88=howardon user-89=pugwash user-90=paulmca1 user-91=cwsocial user-92=cathski user-93=cambria1 user-94=reliable user-95=ninejimm user-96=eugincou user-97=courseme user-98=hirefootballgame user-99=sibtoncc user-100=asandcoc user-101=steve
Sep 27 07:10:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bwppodcast user-103=zebrapho user-104=nsceres user-105=burydropin user-106=fawcettd user-107=dhyana user-108=beauty user-109=eatspam user-110=darkstar user-111=boldover user-112=nove user-113=bakery user-114=sosevalu user-115=crrtipdl user-116=sketchy user-117=cath user-118=havantho user-119=nvihkvu user-120=oubpgvbx user-121=tstardom user-122=what user-123=design user-124=ladburyp user-125=dancinggardener user-126=stagingerris user-127=kategilpin user-128=jennimil user-129=tomandle user-130=nbhavers user-131=careers user-132=david user-133=chrisdal user-134=mcdermos user-135=onlycont user-136=attlebor user-137=lucy user-138=romaldki user-139=hodgsonmail user-140=outdoorc user-141=ranxterc user-142=branko feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 07:10:21 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 07:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:23 nativespace-cdp sudo[21042]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 07:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:24 nativespace-cdp sudo[21059]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2Ql9RN7NFzoZviVS.~
Sep 27 07:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:24 nativespace-cdp sudo[21062]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2Ql9RN7NFzoZviVS.~'
Sep 27 07:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:24 nativespace-cdp sudo[21066]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2Ql9RN7NFzoZviVS.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 07:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:24 nativespace-cdp sudo[21070]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 07:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:24 nativespace-cdp sudo[21073]: pam_unix(sudo:session): session closed for user root
Sep 27 07:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 07:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 07:10:27 nativespace-cdp sudo[21093]: pam_unix(sudo:session): session closed for user root
Sep 27 07:11:33 nativespace-cdp sshd[21328]: Connection closed by 159.100.136.21 port 55174 [preauth]
Sep 27 07:16:33 nativespace-cdp sshd[22827]: Connection closed by 159.100.136.21 port 36632 [preauth]
Sep 27 07:21:36 nativespace-cdp sshd[23881]: Connection closed by 159.100.136.21 port 46208 [preauth]
Sep 27 07:26:34 nativespace-cdp sshd[24946]: Connection closed by 159.100.136.21 port 55732 [preauth]
Sep 27 07:31:36 nativespace-cdp sshd[26859]: Connection closed by 159.100.136.21 port 36928 [preauth]
Sep 27 07:36:34 nativespace-cdp sshd[28293]: Connection closed by 159.100.136.21 port 46812 [preauth]
Sep 27 07:41:33 nativespace-cdp sshd[29439]: Connection closed by 159.100.136.21 port 56380 [preauth]
Sep 27 07:46:36 nativespace-cdp sshd[30932]: Connection closed by 159.100.136.21 port 38158 [preauth]
Sep 27 07:51:34 nativespace-cdp sshd[32199]: Connection closed by 159.100.136.21 port 47616 [preauth]
Sep 27 07:56:37 nativespace-cdp sshd[940]: Connection closed by 159.100.136.21 port 57590 [preauth]
Sep 27 07:56:59 nativespace-cdp sshd[1018]: Invalid user support from 61.220.69.14 port 34914
Sep 27 07:56:59 nativespace-cdp sshd[1018]: input_userauth_request: invalid user support [preauth]
Sep 27 07:56:59 nativespace-cdp sshd[1018]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 07:56:59 nativespace-cdp sshd[1018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.220.69.14
Sep 27 07:57:01 nativespace-cdp sshd[1018]: Failed password for invalid user support from 61.220.69.14 port 34914 ssh2
Sep 27 07:57:01 nativespace-cdp sshd[1018]: Received disconnect from 61.220.69.14 port 34914:11: Bye Bye [preauth]
Sep 27 07:57:01 nativespace-cdp sshd[1018]: Disconnected from 61.220.69.14 port 34914 [preauth]
Sep 27 08:00:39 nativespace-cdp sshd[2052]: Invalid user ubuntu from 154.92.16.119 port 37728
Sep 27 08:00:39 nativespace-cdp sshd[2052]: input_userauth_request: invalid user ubuntu [preauth]
Sep 27 08:00:39 nativespace-cdp sshd[2052]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 08:00:40 nativespace-cdp sshd[2052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.16.119
Sep 27 08:00:42 nativespace-cdp sshd[2052]: Failed password for invalid user ubuntu from 154.92.16.119 port 37728 ssh2
Sep 27 08:00:43 nativespace-cdp sshd[2052]: Received disconnect from 154.92.16.119 port 37728:11: Bye Bye [preauth]
Sep 27 08:00:43 nativespace-cdp sshd[2052]: Disconnected from 154.92.16.119 port 37728 [preauth]
Sep 27 08:01:06 nativespace-cdp sshd[2253]: Invalid user sysadmin from 61.220.69.14 port 40808
Sep 27 08:01:06 nativespace-cdp sshd[2253]: input_userauth_request: invalid user sysadmin [preauth]
Sep 27 08:01:06 nativespace-cdp sshd[2253]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 08:01:06 nativespace-cdp sshd[2253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.220.69.14
Sep 27 08:01:08 nativespace-cdp sshd[2253]: Failed password for invalid user sysadmin from 61.220.69.14 port 40808 ssh2
Sep 27 08:01:08 nativespace-cdp sshd[2253]: Received disconnect from 61.220.69.14 port 40808:11: Bye Bye [preauth]
Sep 27 08:01:08 nativespace-cdp sshd[2253]: Disconnected from 61.220.69.14 port 40808 [preauth]
Sep 27 08:01:34 nativespace-cdp sshd[2536]: Connection closed by 159.100.136.21 port 38908 [preauth]
Sep 27 08:01:40 nativespace-cdp sshd[2523]: Received disconnect from 154.92.16.119 port 51300:11: Bye Bye [preauth]
Sep 27 08:01:40 nativespace-cdp sshd[2523]: Disconnected from 154.92.16.119 port 51300 [preauth]
Sep 27 08:01:55 nativespace-cdp sshd[2586]: Connection closed by 61.220.69.14 port 44002 [preauth]
Sep 27 08:02:19 nativespace-cdp sshd[2667]: Invalid user testuser from 154.92.16.119 port 35784
Sep 27 08:02:20 nativespace-cdp sshd[2667]: input_userauth_request: invalid user testuser [preauth]
Sep 27 08:02:20 nativespace-cdp sshd[2667]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 08:02:20 nativespace-cdp sshd[2667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.16.119
Sep 27 08:02:22 nativespace-cdp sshd[2667]: Failed password for invalid user testuser from 154.92.16.119 port 35784 ssh2
Sep 27 08:02:22 nativespace-cdp sshd[2667]: Received disconnect from 154.92.16.119 port 35784:11: Bye Bye [preauth]
Sep 27 08:02:22 nativespace-cdp sshd[2667]: Disconnected from 154.92.16.119 port 35784 [preauth]
Sep 27 08:02:36 nativespace-cdp sshd[2740]: Invalid user odoo from 61.220.69.14 port 61744
Sep 27 08:02:36 nativespace-cdp sshd[2740]: input_userauth_request: invalid user odoo [preauth]
Sep 27 08:02:36 nativespace-cdp sshd[2740]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 08:02:36 nativespace-cdp sshd[2740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.220.69.14
Sep 27 08:02:39 nativespace-cdp sshd[2740]: Failed password for invalid user odoo from 61.220.69.14 port 61744 ssh2
Sep 27 08:02:39 nativespace-cdp sshd[2740]: Received disconnect from 61.220.69.14 port 61744:11: Bye Bye [preauth]
Sep 27 08:02:39 nativespace-cdp sshd[2740]: Disconnected from 61.220.69.14 port 61744 [preauth]
Sep 27 08:03:01 nativespace-cdp sshd[3029]: Invalid user superman from 154.92.16.119 port 48500
Sep 27 08:03:01 nativespace-cdp sshd[3029]: input_userauth_request: invalid user superman [preauth]
Sep 27 08:03:01 nativespace-cdp sshd[3029]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 08:03:01 nativespace-cdp sshd[3029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.16.119
Sep 27 08:03:03 nativespace-cdp sshd[3029]: Failed password for invalid user superman from 154.92.16.119 port 48500 ssh2
Sep 27 08:03:03 nativespace-cdp sshd[3029]: Received disconnect from 154.92.16.119 port 48500:11: Bye Bye [preauth]
Sep 27 08:03:03 nativespace-cdp sshd[3029]: Disconnected from 154.92.16.119 port 48500 [preauth]
Sep 27 08:06:33 nativespace-cdp sshd[4852]: Connection closed by 159.100.136.21 port 48718 [preauth]
Sep 27 08:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 08:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:00 nativespace-cdp sudo[5608]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 08:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:00 nativespace-cdp sudo[5613]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 08:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:16 nativespace-cdp sudo[5616]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 08:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:16 nativespace-cdp sudo[5787]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 08:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:26 nativespace-cdp sudo[5790]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 08:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:26 nativespace-cdp sudo[5821]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 08:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:26 nativespace-cdp sudo[5825]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 08:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:26 nativespace-cdp sudo[5828]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 08:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:26 nativespace-cdp sudo[5831]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 08:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:26 nativespace-cdp sudo[5834]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 08:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:27 nativespace-cdp sudo[5839]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 08:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:36 nativespace-cdp sudo[5918]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 08:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:44 nativespace-cdp sudo[5924]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=wilsonsw user-2=megacards user-3=musorguk user-4=lakesan1 user-5=brmrjxl user-6=strathar user-7=atestord user-8=sarafoundation user-9=hhdugcor user-10=lbhyisi user-11=magichat user-12=martsblo user-13=dickemery123 user-14=ptkxhsbt user-15=ulsukarm user-16=markward user-17=booff user-18=foundation user-19=vantagep user-20=athenare user-21=connect9 user-22=lbscrmod user-23=maflemin user-24=agproduc user-25=still user-26=stephani user-27=leereyn1 user-28=jarvisin user-29=spectrum user-30=hodgesonweb user-31=theblack user-32=bedfords user-33=newstoda user-34=ggaaorgu user-35=belle user-36=bemadonn user-37=nstriton user-38=brighto1 user-39=vivienn1 user-40=firstre2 user-41=oneoarco user-42=battlere user-43=innovat1 user-44=askhform user-45=stuartge user-46=nativene user-47=alexadmin user-48=skyfirec
Sep 27 08:10:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstrel user-50=clarkass user-51=costestimatorco user-52=firstred user-53=highlegh user-54=southlon user-55=ultbcrra user-56=jonhartl user-57=seftvta user-58=firstres user-59=opaiscyx user-60=coursemc user-61=accooper user-62=ianrayne user-63=connectedshoppin user-64=thqkgnbz user-65=gilpin user-66=milloyco user-67=elecleis user-68=hubmaster user-69=fetch user-70=carsinyo user-71=smrszyqg user-72=isleofwi user-73=nomistakes user-74=hidden user-75=tigerlet user-76=barbersh user-77=nscdp user-78=leftie user-79=foods user-80=fortunaz user-81=health2045 user-82=lkpier user-83=steakbridieme user-84=firstre5 user-85=donnychicago user-86=ctedorgu user-87=philmcph user-88=hirefootballgame user-89=eugincou user-90=courseme user-91=cambria1 user-92=cathski user-93=reliable user-94=ninejimm user-95=cwsocial user-96=howardon user-97=pugwash user-98=paulmca1 user-99=bwppodcast user-100=zebrapho user-101=steve
Sep 27 08:10:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=sibtoncc user-103=asandcoc user-104=beauty user-105=darkstar user-106=eatspam user-107=dhyana user-108=fawcettd user-109=burydropin user-110=nsceres user-111=bakery user-112=crrtipdl user-113=sosevalu user-114=nove user-115=boldover user-116=stagingerris user-117=dancinggardener user-118=ladburyp user-119=kategilpin user-120=design user-121=tstardom user-122=oubpgvbx user-123=what user-124=havantho user-125=cath user-126=sketchy user-127=nvihkvu user-128=chrisdal user-129=mcdermos user-130=david user-131=nbhavers user-132=careers user-133=tomandle user-134=jennimil user-135=hodgsonmail user-136=outdoorc user-137=ranxterc user-138=branko user-139=romaldki user-140=lucy user-141=attlebor user-142=onlycont feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 08:10:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 08:10:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:45 nativespace-cdp sudo[5946]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 08:10:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:46 nativespace-cdp sudo[5955]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SEX3GkL70hEqDYgl.~
Sep 27 08:10:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:46 nativespace-cdp sudo[5959]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SEX3GkL70hEqDYgl.~'
Sep 27 08:10:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:46 nativespace-cdp sudo[5963]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SEX3GkL70hEqDYgl.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 08:10:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:46 nativespace-cdp sudo[5967]: pam_unix(sudo:session): session closed for user root
Sep 27 08:10:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 08:10:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:10:46 nativespace-cdp sudo[5970]: pam_unix(sudo:session): session closed for user root
Sep 27 08:11:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 08:11:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 08:11:07 nativespace-cdp sudo[6059]: pam_unix(sudo:session): session closed for user root
Sep 27 08:11:33 nativespace-cdp sshd[6141]: Connection closed by 159.100.136.21 port 58558 [preauth]
Sep 27 08:14:44 nativespace-cdp sshd[7109]: Did not receive identification string from 165.154.36.105 port 38194
Sep 27 08:14:45 nativespace-cdp sshd[7111]: Connection closed by 165.154.36.105 port 38506 [preauth]
Sep 27 08:14:46 nativespace-cdp sshd[7120]: invalid public DH value: >= p-1 [preauth]
Sep 27 08:14:46 nativespace-cdp sshd[7120]: ssh_dispatch_run_fatal: Connection from 165.154.36.105 port 38802: incomplete message [preauth]
Sep 27 08:15:08 nativespace-cdp sshd[7276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.21.179  user=root
Sep 27 08:15:08 nativespace-cdp sshd[7276]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 27 08:15:10 nativespace-cdp sshd[7276]: Failed password for root from 47.236.21.179 port 57442 ssh2
Sep 27 08:15:10 nativespace-cdp sshd[7276]: Received disconnect from 47.236.21.179 port 57442:11: Bye Bye [preauth]
Sep 27 08:15:10 nativespace-cdp sshd[7276]: Disconnected from 47.236.21.179 port 57442 [preauth]
Sep 27 08:16:33 nativespace-cdp sshd[7607]: Connection closed by 159.100.136.21 port 39942 [preauth]
Sep 27 08:21:35 nativespace-cdp sshd[8929]: Connection closed by 159.100.136.21 port 49520 [preauth]
Sep 27 08:24:35 nativespace-cdp sshd[9762]: Invalid user sysadmin from 47.236.21.179 port 48532
Sep 27 08:24:35 nativespace-cdp sshd[9762]: input_userauth_request: invalid user sysadmin [preauth]
Sep 27 08:24:35 nativespace-cdp sshd[9762]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 08:24:35 nativespace-cdp sshd[9762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.21.179
Sep 27 08:24:37 nativespace-cdp sshd[9762]: Failed password for invalid user sysadmin from 47.236.21.179 port 48532 ssh2
Sep 27 08:24:37 nativespace-cdp sshd[9762]: Received disconnect from 47.236.21.179 port 48532:11: Bye Bye [preauth]
Sep 27 08:24:37 nativespace-cdp sshd[9762]: Disconnected from 47.236.21.179 port 48532 [preauth]
Sep 27 08:24:54 nativespace-cdp sshd[9823]: Invalid user nextcloud from 47.236.21.179 port 34394
Sep 27 08:24:54 nativespace-cdp sshd[9823]: input_userauth_request: invalid user nextcloud [preauth]
Sep 27 08:24:54 nativespace-cdp sshd[9823]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 08:24:54 nativespace-cdp sshd[9823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.21.179
Sep 27 08:24:56 nativespace-cdp sshd[9823]: Failed password for invalid user nextcloud from 47.236.21.179 port 34394 ssh2
Sep 27 08:24:56 nativespace-cdp sshd[9823]: Received disconnect from 47.236.21.179 port 34394:11: Bye Bye [preauth]
Sep 27 08:24:56 nativespace-cdp sshd[9823]: Disconnected from 47.236.21.179 port 34394 [preauth]
Sep 27 08:26:35 nativespace-cdp sshd[10390]: Connection closed by 159.100.136.21 port 59454 [preauth]
Sep 27 08:31:33 nativespace-cdp sshd[12000]: Connection closed by 159.100.136.21 port 40952 [preauth]
Sep 27 08:36:34 nativespace-cdp sshd[13138]: Connection closed by 159.100.136.21 port 50926 [preauth]
Sep 27 08:41:37 nativespace-cdp sshd[14233]: Connection closed by 159.100.136.21 port 60778 [preauth]
Sep 27 08:46:33 nativespace-cdp sshd[15635]: Connection closed by 159.100.136.21 port 42478 [preauth]
Sep 27 08:51:34 nativespace-cdp sshd[16800]: Connection closed by 159.100.136.21 port 52160 [preauth]
Sep 27 08:56:34 nativespace-cdp sshd[17954]: Connection closed by 159.100.136.21 port 33890 [preauth]
Sep 27 09:01:35 nativespace-cdp sshd[19637]: Connection closed by 159.100.136.21 port 43576 [preauth]
Sep 27 09:06:35 nativespace-cdp sshd[20826]: Connection closed by 159.100.136.21 port 53742 [preauth]
Sep 27 09:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 09:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:10:15 nativespace-cdp sudo[21642]: pam_unix(sudo:session): session closed for user root
Sep 27 09:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 09:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:10:15 nativespace-cdp sudo[21646]: pam_unix(sudo:session): session closed for user root
Sep 27 09:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 09:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:10:34 nativespace-cdp sudo[21650]: pam_unix(sudo:session): session closed for user root
Sep 27 09:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 09:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:10:34 nativespace-cdp sudo[21826]: pam_unix(sudo:session): session closed for user root
Sep 27 09:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 09:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:00 nativespace-cdp sudo[21829]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 09:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:01 nativespace-cdp sudo[21919]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 09:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:01 nativespace-cdp sudo[21923]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 09:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:01 nativespace-cdp sudo[21927]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 09:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:01 nativespace-cdp sudo[21931]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 09:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:01 nativespace-cdp sudo[21934]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 09:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:01 nativespace-cdp sudo[21943]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 09:11:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:05 nativespace-cdp sudo[21964]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 09:11:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:08 nativespace-cdp sudo[21969]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hodgsonmail user-2=outdoorc user-3=ranxterc user-4=branko user-5=romaldki user-6=attlebor user-7=lucy user-8=onlycont user-9=chrisdal user-10=mcdermos user-11=careers user-12=nbhavers user-13=david user-14=tomandle user-15=jennimil user-16=ladburyp user-17=dancinggardener user-18=stagingerris user-19=kategilpin user-20=design user-21=tstardom user-22=oubpgvbx user-23=what user-24=sketchy user-25=cath user-26=havantho user-27=nvihkvu user-28=bakery user-29=sosevalu user-30=crrtipdl user-31=nove user-32=boldover user-33=beauty user-34=eatspam user-35=darkstar user-36=dhyana user-37=burydropin user-38=fawcettd user-39=nsceres user-40=bwppodcast user-41=zebrapho user-42=steve user-43=asandcoc user-44=sibtoncc user-45=hirefootballgame user-46=eugincou user-47=courseme user-48=cathski user-49=cambria1
Sep 27 09:11:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=reliable user-51=ninejimm user-52=howardon user-53=pugwash user-54=paulmca1 user-55=cwsocial user-56=isleofwi user-57=smrszyqg user-58=hidden user-59=nomistakes user-60=barbersh user-61=tigerlet user-62=nscdp user-63=fortunaz user-64=health2045 user-65=leftie user-66=foods user-67=lkpier user-68=philmcph user-69=ctedorgu user-70=firstre5 user-71=donnychicago user-72=steakbridieme user-73=accooper user-74=ianrayne user-75=connectedshoppin user-76=thqkgnbz user-77=milloyco user-78=gilpin user-79=elecleis user-80=hubmaster user-81=carsinyo user-82=fetch user-83=clarkass user-84=firstrel user-85=costestimatorco user-86=firstred user-87=southlon user-88=highlegh user-89=seftvta user-90=jonhartl user-91=ultbcrra user-92=firstres user-93=coursemc user-94=opaiscyx user-95=innovat1 user-96=askhform user-97=stuartge user-98=nativene user-99=skyfirec user-100=alexadmin user-101=bedfords user-102=ggaaorgu
Sep 27 09:11:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=belle user-104=newstoda user-105=bemadonn user-106=brighto1 user-107=nstriton user-108=firstre2 user-109=vivienn1 user-110=battlere user-111=oneoarco user-112=still user-113=agproduc user-114=stephani user-115=leereyn1 user-116=jarvisin user-117=spectrum user-118=hodgesonweb user-119=theblack user-120=ulsukarm user-121=markward user-122=booff user-123=foundation user-124=athenare user-125=connect9 user-126=vantagep user-127=maflemin user-128=lbscrmod user-129=lbhyisi user-130=hhdugcor user-131=magichat user-132=martsblo user-133=dickemery123 user-134=ptkxhsbt user-135=wilsonsw user-136=musorguk user-137=megacards user-138=brmrjxl user-139=lakesan1 user-140=strathar user-141=sarafoundation user-142=atestord feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 09:11:08 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 09:11:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:10 nativespace-cdp sudo[21980]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 09:11:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:11 nativespace-cdp sudo[21986]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7jBAWvRDqdlMaIV3.~
Sep 27 09:11:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:11 nativespace-cdp sudo[21990]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7jBAWvRDqdlMaIV3.~'
Sep 27 09:11:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:11 nativespace-cdp sudo[21993]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7jBAWvRDqdlMaIV3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 09:11:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:11 nativespace-cdp sudo[21998]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 09:11:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:11 nativespace-cdp sudo[22001]: pam_unix(sudo:session): session closed for user root
Sep 27 09:11:34 nativespace-cdp sshd[22067]: Connection closed by 159.100.136.21 port 35172 [preauth]
Sep 27 09:11:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 09:11:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 09:11:52 nativespace-cdp sudo[22114]: pam_unix(sudo:session): session closed for user root
Sep 27 09:15:29 nativespace-cdp sshd[23130]: Invalid user ubuntu from 51.75.124.228 port 40672
Sep 27 09:15:29 nativespace-cdp sshd[23130]: input_userauth_request: invalid user ubuntu [preauth]
Sep 27 09:15:30 nativespace-cdp sshd[23130]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 09:15:30 nativespace-cdp sshd[23130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.228
Sep 27 09:15:32 nativespace-cdp sshd[23130]: Failed password for invalid user ubuntu from 51.75.124.228 port 40672 ssh2
Sep 27 09:15:32 nativespace-cdp sshd[23130]: Received disconnect from 51.75.124.228 port 40672:11: Bye Bye [preauth]
Sep 27 09:15:32 nativespace-cdp sshd[23130]: Disconnected from 51.75.124.228 port 40672 [preauth]
Sep 27 09:16:37 nativespace-cdp sshd[23479]: Connection closed by 159.100.136.21 port 44802 [preauth]
Sep 27 09:18:47 nativespace-cdp sshd[23973]: Invalid user username from 94.131.99.17 port 42698
Sep 27 09:18:47 nativespace-cdp sshd[23973]: input_userauth_request: invalid user username [preauth]
Sep 27 09:18:47 nativespace-cdp sshd[23973]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 09:18:47 nativespace-cdp sshd[23973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.131.99.17
Sep 27 09:18:50 nativespace-cdp sshd[23973]: Failed password for invalid user username from 94.131.99.17 port 42698 ssh2
Sep 27 09:18:50 nativespace-cdp sshd[23973]: Received disconnect from 94.131.99.17 port 42698:11: Bye Bye [preauth]
Sep 27 09:18:50 nativespace-cdp sshd[23973]: Disconnected from 94.131.99.17 port 42698 [preauth]
Sep 27 09:19:35 nativespace-cdp sshd[24113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.228  user=root
Sep 27 09:19:35 nativespace-cdp sshd[24113]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 27 09:19:37 nativespace-cdp sshd[24113]: Failed password for root from 51.75.124.228 port 50976 ssh2
Sep 27 09:19:37 nativespace-cdp sshd[24113]: Received disconnect from 51.75.124.228 port 50976:11: Bye Bye [preauth]
Sep 27 09:19:37 nativespace-cdp sshd[24113]: Disconnected from 51.75.124.228 port 50976 [preauth]
Sep 27 09:20:08 nativespace-cdp sshd[24317]: Invalid user test_user from 94.131.99.17 port 49824
Sep 27 09:20:08 nativespace-cdp sshd[24317]: input_userauth_request: invalid user test_user [preauth]
Sep 27 09:20:08 nativespace-cdp sshd[24317]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 09:20:08 nativespace-cdp sshd[24317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.131.99.17
Sep 27 09:20:11 nativespace-cdp sshd[24317]: Failed password for invalid user test_user from 94.131.99.17 port 49824 ssh2
Sep 27 09:20:11 nativespace-cdp sshd[24317]: Received disconnect from 94.131.99.17 port 49824:11: Bye Bye [preauth]
Sep 27 09:20:11 nativespace-cdp sshd[24317]: Disconnected from 94.131.99.17 port 49824 [preauth]
Sep 27 09:20:15 nativespace-cdp sshd[24345]: Invalid user user from 51.75.124.228 port 57894
Sep 27 09:20:15 nativespace-cdp sshd[24345]: input_userauth_request: invalid user user [preauth]
Sep 27 09:20:15 nativespace-cdp sshd[24345]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 09:20:15 nativespace-cdp sshd[24345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.228
Sep 27 09:20:17 nativespace-cdp sshd[24345]: Failed password for invalid user user from 51.75.124.228 port 57894 ssh2
Sep 27 09:20:20 nativespace-cdp sshd[24345]: Received disconnect from 51.75.124.228 port 57894:11: Bye Bye [preauth]
Sep 27 09:20:20 nativespace-cdp sshd[24345]: Disconnected from 51.75.124.228 port 57894 [preauth]
Sep 27 09:20:45 nativespace-cdp sshd[24677]: Invalid user steam from 94.131.99.17 port 41208
Sep 27 09:20:45 nativespace-cdp sshd[24677]: input_userauth_request: invalid user steam [preauth]
Sep 27 09:20:45 nativespace-cdp sshd[24677]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 09:20:45 nativespace-cdp sshd[24677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.131.99.17
Sep 27 09:20:47 nativespace-cdp sshd[24677]: Failed password for invalid user steam from 94.131.99.17 port 41208 ssh2
Sep 27 09:20:47 nativespace-cdp sshd[24677]: Received disconnect from 94.131.99.17 port 41208:11: Bye Bye [preauth]
Sep 27 09:20:47 nativespace-cdp sshd[24677]: Disconnected from 94.131.99.17 port 41208 [preauth]
Sep 27 09:21:36 nativespace-cdp sshd[24912]: Connection closed by 159.100.136.21 port 54394 [preauth]
Sep 27 09:26:35 nativespace-cdp sshd[26053]: Connection closed by 159.100.136.21 port 35752 [preauth]
Sep 27 09:31:34 nativespace-cdp sshd[27551]: Connection closed by 159.100.136.21 port 45044 [preauth]
Sep 27 09:36:37 nativespace-cdp sshd[28761]: Connection closed by 159.100.136.21 port 54906 [preauth]
Sep 27 09:41:34 nativespace-cdp sshd[29961]: Connection closed by 159.100.136.21 port 36198 [preauth]
Sep 27 09:51:36 nativespace-cdp sshd[705]: Connection closed by 159.100.136.21 port 55004 [preauth]
Sep 27 09:56:33 nativespace-cdp sshd[1926]: Connection closed by 159.100.136.21 port 36688 [preauth]
Sep 27 10:01:34 nativespace-cdp sshd[3665]: Connection closed by 159.100.136.21 port 46284 [preauth]
Sep 27 10:06:34 nativespace-cdp sshd[5024]: Connection closed by 159.100.136.21 port 55194 [preauth]
Sep 27 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:06 nativespace-cdp sudo[5821]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:06 nativespace-cdp sudo[5828]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:08 nativespace-cdp sudo[5831]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 10:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:08 nativespace-cdp sudo[5840]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 10:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:13 nativespace-cdp sudo[5843]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 10:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:14 nativespace-cdp sudo[5865]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 10:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:14 nativespace-cdp sudo[5868]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 10:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:14 nativespace-cdp sudo[5871]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 10:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:14 nativespace-cdp sudo[5875]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 10:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:14 nativespace-cdp sudo[5878]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 10:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:14 nativespace-cdp sudo[5881]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 10:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:16 nativespace-cdp sudo[5892]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 10:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:19 nativespace-cdp sudo[5899]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=atestord user-2=sarafoundation user-3=strathar user-4=lakesan1 user-5=brmrjxl user-6=megacards user-7=musorguk user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=hhdugcor user-14=lbhyisi user-15=lbscrmod user-16=maflemin user-17=vantagep user-18=athenare user-19=connect9 user-20=foundation user-21=markward user-22=booff user-23=ulsukarm user-24=theblack user-25=hodgesonweb user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=agproduc user-31=still user-32=oneoarco user-33=battlere user-34=vivienn1 user-35=firstre2 user-36=nstriton user-37=brighto1 user-38=bemadonn user-39=newstoda user-40=ggaaorgu user-41=belle user-42=bedfords user-43=skyfirec user-44=alexadmin user-45=nativene user-46=stuartge user-47=askhform user-48=innovat1
Sep 27 10:10:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=coursemc user-50=opaiscyx user-51=firstres user-52=ultbcrra user-53=jonhartl user-54=seftvta user-55=highlegh user-56=southlon user-57=firstred user-58=costestimatorco user-59=firstrel user-60=clarkass user-61=fetch user-62=carsinyo user-63=hubmaster user-64=elecleis user-65=gilpin user-66=milloyco user-67=thqkgnbz user-68=connectedshoppin user-69=ianrayne user-70=accooper user-71=donnychicago user-72=firstre5 user-73=steakbridieme user-74=philmcph user-75=ctedorgu user-76=lkpier user-77=leftie user-78=foods user-79=health2045 user-80=fortunaz user-81=nscdp user-82=barbersh user-83=tigerlet user-84=nomistakes user-85=hidden user-86=smrszyqg user-87=isleofwi user-88=cwsocial user-89=howardon user-90=pugwash user-91=paulmca1 user-92=reliable user-93=ninejimm user-94=cambria1 user-95=cathski user-96=courseme user-97=eugincou user-98=hirefootballgame user-99=sibtoncc user-100=asandcoc user-101=steve
Sep 27 10:10:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=bwppodcast user-104=nsceres user-105=fawcettd user-106=burydropin user-107=dhyana user-108=darkstar user-109=eatspam user-110=beauty user-111=boldover user-112=nove user-113=crrtipdl user-114=sosevalu user-115=bakery user-116=nvihkvu user-117=havantho user-118=sketchy user-119=cath user-120=what user-121=tstardom user-122=oubpgvbx user-123=design user-124=kategilpin user-125=dancinggardener user-126=stagingerris user-127=ladburyp user-128=jennimil user-129=tomandle user-130=david user-131=careers user-132=nbhavers user-133=mcdermos user-134=chrisdal user-135=onlycont user-136=lucy user-137=attlebor user-138=romaldki user-139=branko user-140=outdoorc user-141=hodgsonmail user-142=ranxterc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 10:10:19 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 10:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:21 nativespace-cdp sudo[5909]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 10:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:22 nativespace-cdp sudo[5931]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PP9NpCCzmp1rIfS7.~
Sep 27 10:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:22 nativespace-cdp sudo[5935]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PP9NpCCzmp1rIfS7.~'
Sep 27 10:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:22 nativespace-cdp sudo[5938]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PP9NpCCzmp1rIfS7.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 10:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:22 nativespace-cdp sudo[5942]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 10:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:23 nativespace-cdp sudo[5945]: pam_unix(sudo:session): session closed for user root
Sep 27 10:10:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 10:10:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 10:10:44 nativespace-cdp sudo[6084]: pam_unix(sudo:session): session closed for user root
Sep 27 10:11:33 nativespace-cdp sshd[6265]: Connection closed by 159.100.136.21 port 36196 [preauth]
Sep 27 10:16:35 nativespace-cdp sshd[7469]: Connection closed by 159.100.136.21 port 45656 [preauth]
Sep 27 10:21:35 nativespace-cdp sshd[8943]: Connection closed by 159.100.136.21 port 55066 [preauth]
Sep 27 10:26:33 nativespace-cdp sshd[10182]: Connection closed by 159.100.136.21 port 36408 [preauth]
Sep 27 10:31:37 nativespace-cdp sshd[11617]: Connection closed by 159.100.136.21 port 46144 [preauth]
Sep 27 10:31:48 nativespace-cdp sshd[11657]: Invalid user test from 47.76.135.114 port 45864
Sep 27 10:31:48 nativespace-cdp sshd[11657]: input_userauth_request: invalid user test [preauth]
Sep 27 10:31:48 nativespace-cdp sshd[11657]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 10:31:48 nativespace-cdp sshd[11657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.76.135.114
Sep 27 10:31:50 nativespace-cdp sshd[11657]: Failed password for invalid user test from 47.76.135.114 port 45864 ssh2
Sep 27 10:31:52 nativespace-cdp sshd[11657]: Received disconnect from 47.76.135.114 port 45864:11: Bye Bye [preauth]
Sep 27 10:31:52 nativespace-cdp sshd[11657]: Disconnected from 47.76.135.114 port 45864 [preauth]
Sep 27 10:36:35 nativespace-cdp sshd[13079]: Connection closed by 159.100.136.21 port 55910 [preauth]
Sep 27 10:39:33 nativespace-cdp sshd[13740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.76.135.114  user=root
Sep 27 10:39:33 nativespace-cdp sshd[13740]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 27 10:39:35 nativespace-cdp sshd[13740]: Failed password for root from 47.76.135.114 port 47618 ssh2
Sep 27 10:39:38 nativespace-cdp sshd[13740]: Received disconnect from 47.76.135.114 port 47618:11: Bye Bye [preauth]
Sep 27 10:39:38 nativespace-cdp sshd[13740]: Disconnected from 47.76.135.114 port 47618 [preauth]
Sep 27 10:39:43 nativespace-cdp sshd[13783]: Invalid user ubuntu from 47.76.135.114 port 53384
Sep 27 10:39:43 nativespace-cdp sshd[13783]: input_userauth_request: invalid user ubuntu [preauth]
Sep 27 10:39:43 nativespace-cdp sshd[13783]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 10:39:43 nativespace-cdp sshd[13783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.76.135.114
Sep 27 10:39:45 nativespace-cdp sshd[13783]: Failed password for invalid user ubuntu from 47.76.135.114 port 53384 ssh2
Sep 27 10:39:45 nativespace-cdp sshd[13783]: Received disconnect from 47.76.135.114 port 53384:11: Bye Bye [preauth]
Sep 27 10:39:45 nativespace-cdp sshd[13783]: Disconnected from 47.76.135.114 port 53384 [preauth]
Sep 27 10:41:33 nativespace-cdp sshd[14266]: Connection closed by 159.100.136.21 port 37118 [preauth]
Sep 27 10:46:35 nativespace-cdp sshd[15698]: Connection closed by 159.100.136.21 port 45978 [preauth]
Sep 27 10:51:34 nativespace-cdp sshd[17068]: Connection closed by 159.100.136.21 port 55336 [preauth]
Sep 27 10:56:33 nativespace-cdp sshd[18243]: Connection closed by 159.100.136.21 port 36644 [preauth]
Sep 27 11:01:35 nativespace-cdp sshd[19787]: Connection closed by 159.100.136.21 port 46008 [preauth]
Sep 27 11:06:33 nativespace-cdp sshd[21191]: Connection closed by 159.100.136.21 port 55724 [preauth]
Sep 27 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:34 nativespace-cdp sudo[22330]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:34 nativespace-cdp sudo[22334]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:35 nativespace-cdp sudo[22337]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 11:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:35 nativespace-cdp sudo[22349]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 11:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:47 nativespace-cdp sudo[22353]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:48 nativespace-cdp sudo[22406]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:48 nativespace-cdp sudo[22410]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:48 nativespace-cdp sudo[22413]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:48 nativespace-cdp sudo[22417]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:48 nativespace-cdp sudo[22420]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:48 nativespace-cdp sudo[22424]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 11:10:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:51 nativespace-cdp sudo[22487]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 11:10:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:56 nativespace-cdp sudo[22491]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=megacards user-2=musorguk user-3=wilsonsw user-4=strathar user-5=atestord user-6=sarafoundation user-7=brmrjxl user-8=lakesan1 user-9=magichat user-10=hhdugcor user-11=lbhyisi user-12=dickemery123 user-13=ptkxhsbt user-14=martsblo user-15=ulsukarm user-16=vantagep user-17=connect9 user-18=athenare user-19=lbscrmod user-20=maflemin user-21=booff user-22=markward user-23=foundation user-24=stephani user-25=leereyn1 user-26=agproduc user-27=still user-28=spectrum user-29=hodgesonweb user-30=theblack user-31=jarvisin user-32=newstoda user-33=ggaaorgu user-34=belle user-35=bemadonn user-36=bedfords user-37=vivienn1 user-38=firstre2 user-39=oneoarco user-40=battlere user-41=nstriton user-42=brighto1 user-43=nativene user-44=innovat1 user-45=stuartge user-46=askhform user-47=skyfirec user-48=alexadmin
Sep 27 11:10:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstred user-50=highlegh user-51=southlon user-52=firstrel user-53=clarkass user-54=costestimatorco user-55=coursemc user-56=opaiscyx user-57=ultbcrra user-58=jonhartl user-59=seftvta user-60=firstres user-61=connectedshoppin user-62=thqkgnbz user-63=accooper user-64=ianrayne user-65=hubmaster user-66=fetch user-67=carsinyo user-68=gilpin user-69=milloyco user-70=elecleis user-71=nomistakes user-72=hidden user-73=tigerlet user-74=barbersh user-75=smrszyqg user-76=isleofwi user-77=lkpier user-78=donnychicago user-79=firstre5 user-80=steakbridieme user-81=philmcph user-82=ctedorgu user-83=nscdp user-84=foods user-85=leftie user-86=health2045 user-87=fortunaz user-88=eugincou user-89=courseme user-90=hirefootballgame user-91=cwsocial user-92=pugwash user-93=paulmca1 user-94=howardon user-95=cambria1 user-96=cathski user-97=ninejimm user-98=reliable user-99=steve user-100=bwppodcast user-101=zebrapho
Sep 27 11:10:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=asandcoc user-103=sibtoncc user-104=dhyana user-105=beauty user-106=darkstar user-107=eatspam user-108=nsceres user-109=fawcettd user-110=burydropin user-111=bakery user-112=crrtipdl user-113=sosevalu user-114=boldover user-115=nove user-116=design user-117=stagingerris user-118=dancinggardener user-119=ladburyp user-120=kategilpin user-121=havantho user-122=sketchy user-123=cath user-124=nvihkvu user-125=oubpgvbx user-126=tstardom user-127=what user-128=david user-129=careers user-130=nbhavers user-131=chrisdal user-132=mcdermos user-133=jennimil user-134=tomandle user-135=romaldki user-136=hodgsonmail user-137=outdoorc user-138=ranxterc user-139=branko user-140=onlycont user-141=lucy user-142=attlebor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 11:10:56 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 11:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:10:58 nativespace-cdp sudo[22508]: pam_unix(sudo:session): session closed for user root
Sep 27 11:10:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 27 11:10:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:00 nativespace-cdp sudo[22520]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 27 11:11:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 27 11:11:00 nativespace-cdp sudo[22525]: pam_unix(sudo:session): session closed for user onlycont
Sep 27 11:11:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 27 11:11:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:01 nativespace-cdp sudo[22536]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 27 11:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 11:11:01 nativespace-cdp sudo[22552]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 11:11:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 27 11:11:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:04 nativespace-cdp sudo[22575]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 27 11:11:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 27 11:11:04 nativespace-cdp sudo[22582]: pam_unix(sudo:session): session closed for user lkpier
Sep 27 11:11:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 27 11:11:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:05 nativespace-cdp sudo[22593]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 27 11:11:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 27 11:11:05 nativespace-cdp sudo[22598]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 27 11:11:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 27 11:11:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 27 11:11:05 nativespace-cdp sudo[22609]: pam_unix(sudo:session): session closed for user oneoarco
Sep 27 11:11:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 27 11:11:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:06 nativespace-cdp sudo[22621]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 27 11:11:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 27 11:11:06 nativespace-cdp sudo[22630]: pam_unix(sudo:session): session closed for user fortunaz
Sep 27 11:11:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 27 11:11:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:06 nativespace-cdp sudo[22640]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 11:11:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:06 nativespace-cdp sudo[22643]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 27 11:11:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:25 nativespace-cdp sudo[23551]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 27 11:11:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:25 nativespace-cdp sudo[23555]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 11:11:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:32 nativespace-cdp sudo[23587]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DdlP04SLI2BTEfiI.~
Sep 27 11:11:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:32 nativespace-cdp sudo[23591]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DdlP04SLI2BTEfiI.~'
Sep 27 11:11:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:32 nativespace-cdp sudo[23594]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DdlP04SLI2BTEfiI.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 11:11:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:32 nativespace-cdp sudo[23598]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 11:11:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:32 nativespace-cdp sudo[23601]: pam_unix(sudo:session): session closed for user root
Sep 27 11:11:33 nativespace-cdp sshd[23607]: Connection closed by 159.100.136.21 port 36974 [preauth]
Sep 27 11:11:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 11:11:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 11:11:51 nativespace-cdp sudo[23673]: pam_unix(sudo:session): session closed for user root
Sep 27 11:15:26 nativespace-cdp sshd[24898]: Accepted publickey for root from 66.155.22.27 port 44668 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 27 11:15:26 nativespace-cdp sshd[24898]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 27 11:16:33 nativespace-cdp sshd[25203]: Connection closed by 159.100.136.21 port 46654 [preauth]
Sep 27 11:17:38 nativespace-cdp sshd[24898]: Received disconnect from 66.155.22.27 port 44668:11: Normal Shutdown
Sep 27 11:17:38 nativespace-cdp sshd[24898]: Disconnected from 66.155.22.27 port 44668
Sep 27 11:17:38 nativespace-cdp sshd[24898]: pam_unix(sshd:session): session closed for user root
Sep 27 11:21:33 nativespace-cdp sshd[26409]: Connection closed by 159.100.136.21 port 56022 [preauth]
Sep 27 11:26:39 nativespace-cdp sshd[27433]: Did not receive identification string from 159.100.136.21 port 37884
Sep 27 11:31:34 nativespace-cdp sshd[28934]: Connection closed by 159.100.136.21 port 47630 [preauth]
Sep 27 11:36:33 nativespace-cdp sshd[30302]: Connection closed by 159.100.136.21 port 57406 [preauth]
Sep 27 11:41:35 nativespace-cdp sshd[31391]: Connection closed by 159.100.136.21 port 38344 [preauth]
Sep 27 11:46:34 nativespace-cdp sshd[435]: Connection closed by 159.100.136.21 port 46976 [preauth]
Sep 27 11:47:31 nativespace-cdp sshd[632]: Connection reset by 192.181.113.0 port 55582 [preauth]
Sep 27 11:49:36 nativespace-cdp sshd[1241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.181.113.0  user=root
Sep 27 11:49:36 nativespace-cdp sshd[1241]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 27 11:49:38 nativespace-cdp sshd[1241]: Failed password for root from 192.181.113.0 port 60440 ssh2
Sep 27 11:49:38 nativespace-cdp sshd[1241]: Connection closed by 192.181.113.0 port 60440 [preauth]
Sep 27 11:49:54 nativespace-cdp sshd[1284]: Invalid user zhy from 192.181.113.0 port 45756
Sep 27 11:49:54 nativespace-cdp sshd[1284]: input_userauth_request: invalid user zhy [preauth]
Sep 27 11:49:54 nativespace-cdp sshd[1284]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 11:49:54 nativespace-cdp sshd[1284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.181.113.0
Sep 27 11:49:56 nativespace-cdp sshd[1284]: Failed password for invalid user zhy from 192.181.113.0 port 45756 ssh2
Sep 27 11:49:57 nativespace-cdp sshd[1284]: Connection closed by 192.181.113.0 port 45756 [preauth]
Sep 27 11:50:17 nativespace-cdp sshd[1465]: Invalid user bird from 192.181.113.0 port 43672
Sep 27 11:50:17 nativespace-cdp sshd[1465]: input_userauth_request: invalid user bird [preauth]
Sep 27 11:50:17 nativespace-cdp sshd[1465]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 11:50:17 nativespace-cdp sshd[1465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.181.113.0
Sep 27 11:50:19 nativespace-cdp sshd[1465]: Failed password for invalid user bird from 192.181.113.0 port 43672 ssh2
Sep 27 11:50:22 nativespace-cdp sshd[1465]: Connection closed by 192.181.113.0 port 43672 [preauth]
Sep 27 11:51:34 nativespace-cdp sshd[1794]: Connection closed by 159.100.136.21 port 56004 [preauth]
Sep 27 11:56:36 nativespace-cdp sshd[3120]: Connection closed by 159.100.136.21 port 37316 [preauth]
Sep 27 12:01:35 nativespace-cdp sshd[4879]: Connection closed by 159.100.136.21 port 46902 [preauth]
Sep 27 12:06:34 nativespace-cdp sshd[6109]: Connection closed by 159.100.136.21 port 56400 [preauth]
Sep 27 12:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 12:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:22 nativespace-cdp sudo[7030]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 12:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:22 nativespace-cdp sudo[7036]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 12:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:25 nativespace-cdp sudo[7039]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 12:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:25 nativespace-cdp sudo[7048]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 12:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:35 nativespace-cdp sudo[7051]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 12:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:35 nativespace-cdp sudo[7081]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 12:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:35 nativespace-cdp sudo[7084]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 12:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:35 nativespace-cdp sudo[7087]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 12:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:35 nativespace-cdp sudo[7090]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 12:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:35 nativespace-cdp sudo[7093]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 12:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:36 nativespace-cdp sudo[7097]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 12:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:39 nativespace-cdp sudo[7172]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 12:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:44 nativespace-cdp sudo[7178]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hubmaster user-2=carsinyo user-3=fetch user-4=gilpin user-5=milloyco user-6=elecleis user-7=connectedshoppin user-8=thqkgnbz user-9=accooper user-10=ianrayne user-11=coursemc user-12=opaiscyx user-13=jonhartl user-14=seftvta user-15=ultbcrra user-16=firstres user-17=firstred user-18=southlon user-19=highlegh user-20=clarkass user-21=firstrel user-22=costestimatorco user-23=alexadmin user-24=skyfirec user-25=nativene user-26=innovat1 user-27=stuartge user-28=askhform user-29=firstre2 user-30=vivienn1 user-31=battlere user-32=oneoarco user-33=brighto1 user-34=nstriton user-35=ggaaorgu user-36=belle user-37=newstoda user-38=bemadonn user-39=bedfords user-40=spectrum user-41=hodgesonweb user-42=theblack user-43=jarvisin user-44=stephani user-45=leereyn1 user-46=still user-47=agproduc
Sep 27 12:10:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=athenare user-49=connect9 user-50=vantagep user-51=maflemin user-52=lbscrmod user-53=foundation user-54=markward user-55=booff user-56=ulsukarm user-57=dickemery123 user-58=ptkxhsbt user-59=martsblo user-60=magichat user-61=lbhyisi user-62=hhdugcor user-63=strathar user-64=sarafoundation user-65=atestord user-66=brmrjxl user-67=lakesan1 user-68=musorguk user-69=megacards user-70=wilsonsw user-71=onlycont user-72=attlebor user-73=lucy user-74=romaldki user-75=outdoorc user-76=hodgsonmail user-77=ranxterc user-78=branko user-79=jennimil user-80=tomandle user-81=careers user-82=nbhavers user-83=david user-84=chrisdal user-85=mcdermos user-86=sketchy user-87=cath user-88=havantho user-89=nvihkvu user-90=oubpgvbx user-91=tstardom user-92=what user-93=design user-94=ladburyp user-95=dancinggardener user-96=stagingerris user-97=kategilpin user-98=boldover user-99=nove user-100=bakery user-101=sosevalu
Sep 27 12:10:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=nsceres user-104=burydropin user-105=fawcettd user-106=dhyana user-107=beauty user-108=eatspam user-109=darkstar user-110=asandcoc user-111=sibtoncc user-112=steve user-113=bwppodcast user-114=zebrapho user-115=howardon user-116=paulmca1 user-117=pugwash user-118=cwsocial user-119=cathski user-120=cambria1 user-121=ninejimm user-122=reliable user-123=eugincou user-124=courseme user-125=hirefootballgame user-126=lkpier user-127=philmcph user-128=ctedorgu user-129=firstre5 user-130=donnychicago user-131=steakbridieme user-132=nscdp user-133=fortunaz user-134=health2045 user-135=leftie user-136=foods user-137=hidden user-138=nomistakes user-139=barbersh user-140=tigerlet user-141=isleofwi user-142=smrszyqg feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 27 12:10:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 12:10:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:47 nativespace-cdp sudo[7238]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 12:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:48 nativespace-cdp sudo[7250]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0UCA8rCPd6rOL9eM.~
Sep 27 12:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:48 nativespace-cdp sudo[7253]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0UCA8rCPd6rOL9eM.~'
Sep 27 12:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:48 nativespace-cdp sudo[7256]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0UCA8rCPd6rOL9eM.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 12:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:48 nativespace-cdp sudo[7261]: pam_unix(sudo:session): session closed for user root
Sep 27 12:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 12:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:10:48 nativespace-cdp sudo[7265]: pam_unix(sudo:session): session closed for user root
Sep 27 12:11:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 12:11:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 12:11:05 nativespace-cdp sudo[7340]: pam_unix(sudo:session): session closed for user root
Sep 27 12:11:33 nativespace-cdp sshd[7452]: Connection closed by 159.100.136.21 port 37600 [preauth]
Sep 27 12:16:35 nativespace-cdp sshd[8794]: Connection closed by 159.100.136.21 port 46036 [preauth]
Sep 27 12:21:36 nativespace-cdp sshd[9966]: Connection closed by 159.100.136.21 port 55216 [preauth]
Sep 27 12:26:35 nativespace-cdp sshd[11306]: Connection closed by 159.100.136.21 port 36364 [preauth]
Sep 27 12:31:33 nativespace-cdp sshd[12940]: Connection closed by 159.100.136.21 port 45472 [preauth]
Sep 27 12:36:34 nativespace-cdp sshd[14492]: Connection closed by 159.100.136.21 port 55012 [preauth]
Sep 27 12:41:36 nativespace-cdp sshd[15620]: Connection closed by 159.100.136.21 port 36168 [preauth]
Sep 27 12:51:33 nativespace-cdp sshd[18281]: Connection closed by 159.100.136.21 port 55020 [preauth]
Sep 27 12:56:36 nativespace-cdp sshd[19437]: Connection closed by 159.100.136.21 port 36588 [preauth]
Sep 27 13:01:33 nativespace-cdp sshd[20860]: Connection closed by 159.100.136.21 port 46318 [preauth]
Sep 27 13:06:34 nativespace-cdp sshd[22663]: Connection closed by 159.100.136.21 port 56528 [preauth]
Sep 27 13:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 13:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:15 nativespace-cdp sudo[23628]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 13:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:15 nativespace-cdp sudo[23632]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 13:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:17 nativespace-cdp sudo[23635]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 13:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:17 nativespace-cdp sudo[23650]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 13:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:20 nativespace-cdp sudo[23654]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 13:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:20 nativespace-cdp sudo[23666]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 13:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:20 nativespace-cdp sudo[23671]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 13:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:20 nativespace-cdp sudo[23674]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 13:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:20 nativespace-cdp sudo[23677]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 13:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:20 nativespace-cdp sudo[23680]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 13:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:21 nativespace-cdp sudo[23683]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 13:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:32 nativespace-cdp sudo[23720]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 13:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:36 nativespace-cdp sudo[23725]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=lucy user-2=attlebor user-3=onlycont user-4=outdoorc user-5=ranxterc user-6=hodgsonmail user-7=branko user-8=romaldki user-9=tomandle user-10=jennimil user-11=chrisdal user-12=mcdermos user-13=david user-14=nbhavers user-15=careers user-16=tstardom user-17=oubpgvbx user-18=what user-19=havantho user-20=sketchy user-21=cath user-22=nvihkvu user-23=stagingerris user-24=dancinggardener user-25=ladburyp user-26=kategilpin user-27=design user-28=nove user-29=boldover user-30=bakery user-31=crrtipdl user-32=sosevalu user-33=fawcettd user-34=burydropin user-35=nsceres user-36=beauty user-37=darkstar user-38=eatspam user-39=dhyana user-40=asandcoc user-41=sibtoncc user-42=bwppodcast user-43=zebrapho user-44=steve user-45=cathski user-46=cambria1 user-47=ninejimm user-48=reliable user-49=cwsocial
Sep 27 13:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=howardon user-51=paulmca1 user-52=pugwash user-53=hirefootballgame user-54=eugincou user-55=courseme user-56=nscdp user-57=foods user-58=leftie user-59=fortunaz user-60=health2045 user-61=lkpier user-62=steakbridieme user-63=firstre5 user-64=donnychicago user-65=ctedorgu user-66=philmcph user-67=smrszyqg user-68=isleofwi user-69=nomistakes user-70=hidden user-71=barbersh user-72=tigerlet user-73=milloyco user-74=gilpin user-75=elecleis user-76=hubmaster user-77=fetch user-78=carsinyo user-79=accooper user-80=ianrayne user-81=connectedshoppin user-82=thqkgnbz user-83=ultbcrra user-84=jonhartl user-85=seftvta user-86=firstres user-87=coursemc user-88=opaiscyx user-89=clarkass user-90=firstrel user-91=costestimatorco user-92=firstred user-93=highlegh user-94=southlon user-95=alexadmin user-96=skyfirec user-97=innovat1 user-98=stuartge user-99=askhform user-100=nativene user-101=nstriton user-102=brighto1
Sep 27 13:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=vivienn1 user-104=firstre2 user-105=oneoarco user-106=battlere user-107=bedfords user-108=newstoda user-109=ggaaorgu user-110=belle user-111=bemadonn user-112=jarvisin user-113=spectrum user-114=theblack user-115=hodgesonweb user-116=agproduc user-117=still user-118=stephani user-119=leereyn1 user-120=foundation user-121=markward user-122=booff user-123=vantagep user-124=athenare user-125=connect9 user-126=lbscrmod user-127=maflemin user-128=ulsukarm user-129=martsblo user-130=dickemery123 user-131=ptkxhsbt user-132=hhdugcor user-133=lbhyisi user-134=magichat user-135=lakesan1 user-136=brmrjxl user-137=strathar user-138=atestord user-139=sarafoundation user-140=wilsonsw user-141=megacards user-142=musorguk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 13:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 13:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:38 nativespace-cdp sudo[23741]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 13:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:39 nativespace-cdp sudo[23751]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rX6egnpJufAj0BbE.~
Sep 27 13:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:39 nativespace-cdp sudo[23757]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rX6egnpJufAj0BbE.~'
Sep 27 13:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:39 nativespace-cdp sudo[23760]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rX6egnpJufAj0BbE.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 13:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:39 nativespace-cdp sudo[23764]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 13:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:39 nativespace-cdp sudo[23768]: pam_unix(sudo:session): session closed for user root
Sep 27 13:10:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 13:10:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 13:10:46 nativespace-cdp sudo[23804]: pam_unix(sudo:session): session closed for user root
Sep 27 13:11:33 nativespace-cdp sshd[24050]: Connection closed by 159.100.136.21 port 38050 [preauth]
Sep 27 13:16:36 nativespace-cdp sshd[25776]: Connection closed by 159.100.136.21 port 47982 [preauth]
Sep 27 13:20:52 nativespace-cdp crond[26548]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26557]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26554]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26553]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26545]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26542]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26547]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26555]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26537]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26540]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26538]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26551]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26536]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26549]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26550]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26552]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26544]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26556]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26546]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26543]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26541]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:20:52 nativespace-cdp crond[26539]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:21:41 nativespace-cdp sshd[26745]: Did not receive identification string from 159.100.136.21 port 57302
Sep 27 13:25:22 nativespace-cdp crond[27089]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:25:22 nativespace-cdp crond[27088]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:26:40 nativespace-cdp sshd[27409]: Did not receive identification string from 159.100.136.21 port 38822
Sep 27 13:30:52 nativespace-cdp crond[28068]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28073]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28083]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28070]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28081]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28076]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28065]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28071]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28077]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28072]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28067]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28066]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28078]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28084]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28082]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28074]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28080]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28086]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28069]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28075]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28085]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:30:52 nativespace-cdp crond[28079]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:31:58 nativespace-cdp sshd[28237]: Did not receive identification string from 159.100.136.21 port 48290
Sep 27 13:35:08 nativespace-cdp crond[28443]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:35:08 nativespace-cdp crond[28442]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:35:08 nativespace-cdp crond[28541]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:35:08 nativespace-cdp crond[28540]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 27 13:35:16 nativespace-cdp sshd[28440]: Accepted publickey for root from 66.155.22.27 port 52132 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 27 13:35:21 nativespace-cdp sshd[28440]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 27 13:36:21 nativespace-cdp CROND[28701]: pam_systemd(crond:session): Failed to release session: Connection timed out
Sep 27 13:37:14 nativespace-cdp sshd[29058]: Did not receive identification string from 159.100.136.21 port 57982
Sep 27 13:38:00 nativespace-cdp polkitd[421]: Registered Authentication Agent for unix-process:29685:674937319 (system bus name :1.1491873 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
Sep 27 13:38:00 nativespace-cdp polkitd[421]: Unregistered Authentication Agent for unix-process:29685:674937319 (system bus name :1.1491873, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus)
Sep 27 13:38:00 nativespace-cdp polkitd[421]: Registered Authentication Agent for unix-process:29704:674937365 (system bus name :1.1491874 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
Sep 27 13:38:47 nativespace-cdp polkitd[421]: Unregistered Authentication Agent for unix-process:29704:674937365 (system bus name :1.1491874, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus)
Sep 27 13:39:13 nativespace-cdp polkitd[421]: Registered Authentication Agent for unix-process:30085:674944572 (system bus name :1.1491884 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
Sep 27 13:39:41 nativespace-cdp polkitd[421]: Unregistered Authentication Agent for unix-process:30085:674944572 (system bus name :1.1491884, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus)
Sep 27 13:39:41 nativespace-cdp polkitd[421]: Registered Authentication Agent for unix-process:30204:674947383 (system bus name :1.1491886 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
Sep 27 13:41:28 nativespace-cdp polkitd[421]: Unregistered Authentication Agent for unix-process:30204:674947383 (system bus name :1.1491886, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus)
Sep 27 13:41:35 nativespace-cdp sshd[31191]: Connection closed by 159.100.136.21 port 39302 [preauth]
Sep 27 13:46:33 nativespace-cdp sshd[1040]: Connection closed by 159.100.136.21 port 49190 [preauth]
Sep 27 13:51:33 nativespace-cdp sshd[3587]: Connection closed by 159.100.136.21 port 58844 [preauth]
Sep 27 13:56:03 nativespace-cdp sshd[28440]: pam_unix(sshd:session): session closed for user root
Sep 27 13:56:12 nativespace-cdp sshd[5937]: Accepted publickey for root from 185.67.178.249 port 33094 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 27 13:56:12 nativespace-cdp sshd[5937]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 27 13:56:33 nativespace-cdp sshd[6235]: Connection closed by 159.100.136.21 port 40714 [preauth]
Sep 27 14:01:35 nativespace-cdp sshd[9575]: Connection closed by 159.100.136.21 port 50590 [preauth]
Sep 27 14:06:33 nativespace-cdp sshd[11778]: Connection closed by 159.100.136.21 port 60642 [preauth]
Sep 27 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:39 nativespace-cdp sudo[12369]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:39 nativespace-cdp sudo[12376]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:45 nativespace-cdp sudo[12379]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 14:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:45 nativespace-cdp sudo[12453]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 14:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:55 nativespace-cdp sudo[12456]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:55 nativespace-cdp sudo[12485]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:55 nativespace-cdp sudo[12488]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:55 nativespace-cdp sudo[12491]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:56 nativespace-cdp sudo[12494]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:56 nativespace-cdp sudo[12498]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:56 nativespace-cdp sudo[12503]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:09:58 nativespace-cdp sudo[12514]: pam_unix(sudo:session): session closed for user root
Sep 27 14:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 14:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:10:06 nativespace-cdp sudo[12520]: pam_unix(sudo:session): session closed for user root
Sep 27 14:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=markward user-2=foundation user-3=booff user-4=maflemin user-5=lbscrmod user-6=connect9 user-7=athenare user-8=vantagep user-9=ulsukarm user-10=jarvisin user-11=theblack user-12=hodgesonweb user-13=spectrum user-14=still user-15=agproduc user-16=leereyn1 user-17=stephani user-18=lakesan1 user-19=brmrjxl user-20=sarafoundation user-21=atestord user-22=strathar user-23=wilsonsw user-24=musorguk user-25=megacards user-26=martsblo user-27=ptkxhsbt user-28=dickemery123 user-29=lbhyisi user-30=hhdugcor user-31=magichat user-32=firstres user-33=jonhartl user-34=seftvta user-35=ultbcrra user-36=opaiscyx user-37=coursemc user-38=costestimatorco user-39=clarkass user-40=firstrel user-41=southlon user-42=highlegh user-43=firstred user-44=elecleis user-45=gilpin user-46=milloyco user-47=carsinyo
Sep 27 14:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=fetch user-49=hubmaster user-50=ianrayne user-51=accooper user-52=thqkgnbz user-53=connectedshoppin user-54=brighto1 user-55=nstriton user-56=battlere user-57=oneoarco user-58=firstre2 user-59=vivienn1 user-60=bedfords user-61=bemadonn user-62=belle user-63=ggaaorgu user-64=newstoda user-65=alexadmin user-66=skyfirec user-67=askhform user-68=stuartge user-69=innovat1 user-70=nativene user-71=sibtoncc user-72=asandcoc user-73=zebrapho user-74=bwppodcast user-75=steve user-76=burydropin user-77=fawcettd user-78=nsceres user-79=eatspam user-80=darkstar user-81=beauty user-82=dhyana user-83=health2045 user-84=fortunaz user-85=leftie user-86=foods user-87=nscdp user-88=philmcph user-89=ctedorgu user-90=firstre5 user-91=steakbridieme user-92=donnychicago user-93=lkpier user-94=isleofwi user-95=smrszyqg user-96=tigerlet user-97=barbersh user-98=hidden user-99=nomistakes user-100=ninejimm user-101=reliable
Sep 27 14:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=cathski user-103=cambria1 user-104=howardon user-105=pugwash user-106=paulmca1 user-107=cwsocial user-108=hirefootballgame user-109=courseme user-110=eugincou user-111=tomandle user-112=jennimil user-113=mcdermos user-114=chrisdal user-115=nbhavers user-116=careers user-117=david user-118=attlebor user-119=lucy user-120=onlycont user-121=branko user-122=outdoorc user-123=ranxterc user-124=hodgsonmail user-125=romaldki user-126=nove user-127=boldover user-128=sosevalu user-129=crrtipdl user-130=bakery user-131=what user-132=oubpgvbx user-133=tstardom user-134=nvihkvu user-135=sketchy user-136=cath user-137=havantho user-138=kategilpin user-139=ladburyp user-140=dancinggardener user-141=stagingerris user-142=design feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 27 14:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 14:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:10:10 nativespace-cdp sudo[12660]: pam_unix(sudo:session): session closed for user root
Sep 27 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:10:12 nativespace-cdp sudo[12688]: pam_unix(sudo:session): session closed for user root
Sep 27 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-T8bdXPARkoH8m5Gw.~
Sep 27 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:10:12 nativespace-cdp sudo[12694]: pam_unix(sudo:session): session closed for user root
Sep 27 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-T8bdXPARkoH8m5Gw.~'
Sep 27 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:10:12 nativespace-cdp sudo[12697]: pam_unix(sudo:session): session closed for user root
Sep 27 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-T8bdXPARkoH8m5Gw.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:10:12 nativespace-cdp sudo[12701]: pam_unix(sudo:session): session closed for user root
Sep 27 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:10:12 nativespace-cdp sudo[12704]: pam_unix(sudo:session): session closed for user root
Sep 27 14:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 14:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 14:10:16 nativespace-cdp sudo[12738]: pam_unix(sudo:session): session closed for user root
Sep 27 14:11:33 nativespace-cdp sshd[13123]: Connection closed by 159.100.136.21 port 42022 [preauth]
Sep 27 14:16:33 nativespace-cdp sshd[15120]: Connection closed by 159.100.136.21 port 52072 [preauth]
Sep 27 14:21:33 nativespace-cdp sshd[16664]: Connection closed by 159.100.136.21 port 33300 [preauth]
Sep 27 14:26:33 nativespace-cdp sshd[17900]: Connection closed by 159.100.136.21 port 43146 [preauth]
Sep 27 14:31:33 nativespace-cdp sshd[19444]: Connection closed by 159.100.136.21 port 52568 [preauth]
Sep 27 14:36:33 nativespace-cdp sshd[20556]: Connection closed by 159.100.136.21 port 34370 [preauth]
Sep 27 14:41:33 nativespace-cdp sshd[21873]: Connection closed by 159.100.136.21 port 44112 [preauth]
Sep 27 14:46:36 nativespace-cdp sshd[23290]: Connection closed by 159.100.136.21 port 53872 [preauth]
Sep 27 14:51:33 nativespace-cdp sshd[24547]: Connection closed by 159.100.136.21 port 34970 [preauth]
Sep 27 14:56:34 nativespace-cdp sshd[25582]: Connection closed by 159.100.136.21 port 45016 [preauth]
Sep 27 15:01:33 nativespace-cdp sshd[26830]: Connection closed by 159.100.136.21 port 54434 [preauth]
Sep 27 15:06:37 nativespace-cdp sshd[28373]: Connection closed by 159.100.136.21 port 36202 [preauth]
Sep 27 15:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 15:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:39 nativespace-cdp sudo[29001]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 15:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:39 nativespace-cdp sudo[29005]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 15:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:43 nativespace-cdp sudo[29009]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:43 nativespace-cdp sudo[29022]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:46 nativespace-cdp sudo[29026]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:46 nativespace-cdp sudo[29043]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:46 nativespace-cdp sudo[29046]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:46 nativespace-cdp sudo[29049]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:46 nativespace-cdp sudo[29052]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:47 nativespace-cdp sudo[29055]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 15:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:47 nativespace-cdp sudo[29058]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:49 nativespace-cdp sudo[29068]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:51 nativespace-cdp sudo[29073]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=asandcoc user-2=sibtoncc user-3=steve user-4=bwppodcast user-5=zebrapho user-6=nsceres user-7=burydropin user-8=fawcettd user-9=dhyana user-10=beauty user-11=eatspam user-12=darkstar user-13=lkpier user-14=philmcph user-15=ctedorgu user-16=steakbridieme user-17=firstre5 user-18=donnychicago user-19=nscdp user-20=fortunaz user-21=health2045 user-22=foods user-23=leftie user-24=hidden user-25=nomistakes user-26=tigerlet user-27=barbersh user-28=isleofwi user-29=smrszyqg user-30=pugwash user-31=paulmca1 user-32=howardon user-33=cwsocial user-34=cathski user-35=cambria1 user-36=reliable user-37=ninejimm user-38=eugincou user-39=courseme user-40=hirefootballgame user-41=jennimil user-42=tomandle user-43=nbhavers user-44=careers user-45=david user-46=chrisdal user-47=mcdermos user-48=onlycont
Sep 27 15:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=attlebor user-50=lucy user-51=romaldki user-52=outdoorc user-53=hodgsonmail user-54=ranxterc user-55=branko user-56=boldover user-57=nove user-58=bakery user-59=sosevalu user-60=crrtipdl user-61=cath user-62=sketchy user-63=havantho user-64=nvihkvu user-65=tstardom user-66=oubpgvbx user-67=what user-68=design user-69=ladburyp user-70=dancinggardener user-71=stagingerris user-72=kategilpin user-73=connect9 user-74=athenare user-75=vantagep user-76=maflemin user-77=lbscrmod user-78=markward user-79=foundation user-80=booff user-81=ulsukarm user-82=spectrum user-83=hodgesonweb user-84=theblack user-85=jarvisin user-86=stephani user-87=leereyn1 user-88=still user-89=agproduc user-90=strathar user-91=sarafoundation user-92=atestord user-93=lakesan1 user-94=brmrjxl user-95=musorguk user-96=megacards user-97=wilsonsw user-98=dickemery123 user-99=ptkxhsbt user-100=martsblo user-101=magichat user-102=lbhyisi
Sep 27 15:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=hhdugcor user-104=coursemc user-105=opaiscyx user-106=seftvta user-107=jonhartl user-108=ultbcrra user-109=firstres user-110=firstred user-111=southlon user-112=highlegh user-113=firstrel user-114=clarkass user-115=costestimatorco user-116=hubmaster user-117=carsinyo user-118=fetch user-119=milloyco user-120=gilpin user-121=elecleis user-122=connectedshoppin user-123=thqkgnbz user-124=accooper user-125=ianrayne user-126=firstre2 user-127=vivienn1 user-128=battlere user-129=oneoarco user-130=brighto1 user-131=nstriton user-132=belle user-133=ggaaorgu user-134=newstoda user-135=bemadonn user-136=bedfords user-137=alexadmin user-138=skyfirec user-139=nativene user-140=innovat1 user-141=stuartge user-142=askhform feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 15:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 15:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:52 nativespace-cdp sudo[29082]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:53 nativespace-cdp sudo[29088]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lwCLdHWMQ35dAEWQ.~
Sep 27 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:53 nativespace-cdp sudo[29091]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lwCLdHWMQ35dAEWQ.~'
Sep 27 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:53 nativespace-cdp sudo[29094]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lwCLdHWMQ35dAEWQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:53 nativespace-cdp sudo[29098]: pam_unix(sudo:session): session closed for user root
Sep 27 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:09:53 nativespace-cdp sudo[29103]: pam_unix(sudo:session): session closed for user root
Sep 27 15:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 15:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 15:10:25 nativespace-cdp sudo[29325]: pam_unix(sudo:session): session closed for user root
Sep 27 15:11:37 nativespace-cdp sshd[29669]: Connection closed by 159.100.136.21 port 45596 [preauth]
Sep 27 15:16:35 nativespace-cdp sshd[31215]: Connection closed by 159.100.136.21 port 55274 [preauth]
Sep 27 15:21:37 nativespace-cdp sshd[32370]: Connection closed by 159.100.136.21 port 36502 [preauth]
Sep 27 15:26:33 nativespace-cdp sshd[928]: Connection closed by 159.100.136.21 port 46644 [preauth]
Sep 27 15:31:34 nativespace-cdp sshd[2498]: Connection closed by 159.100.136.21 port 56390 [preauth]
Sep 27 15:36:39 nativespace-cdp sshd[3568]: Connection closed by 159.100.136.21 port 38404 [preauth]
Sep 27 15:41:36 nativespace-cdp sshd[4738]: Connection closed by 159.100.136.21 port 48018 [preauth]
Sep 27 15:46:33 nativespace-cdp sshd[5965]: Connection closed by 159.100.136.21 port 58046 [preauth]
Sep 27 15:51:33 nativespace-cdp sshd[7159]: Connection closed by 159.100.136.21 port 39126 [preauth]
Sep 27 15:56:33 nativespace-cdp sshd[8497]: Connection closed by 159.100.136.21 port 49080 [preauth]
Sep 27 16:01:33 nativespace-cdp sshd[11278]: Connection closed by 159.100.136.21 port 58622 [preauth]
Sep 27 16:06:33 nativespace-cdp sshd[12545]: Connection closed by 159.100.136.21 port 40586 [preauth]
Sep 27 16:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 16:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:33 nativespace-cdp sudo[13083]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 16:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:33 nativespace-cdp sudo[13087]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 16:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:36 nativespace-cdp sudo[13090]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 16:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:36 nativespace-cdp sudo[13102]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 16:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:40 nativespace-cdp sudo[13105]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 16:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:40 nativespace-cdp sudo[13120]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 16:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:40 nativespace-cdp sudo[13123]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 16:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:40 nativespace-cdp sudo[13126]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 16:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:40 nativespace-cdp sudo[13130]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 16:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:40 nativespace-cdp sudo[13134]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 16:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:40 nativespace-cdp sudo[13138]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 16:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:44 nativespace-cdp sudo[13160]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 16:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:52 nativespace-cdp sudo[13173]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=courseme user-2=eugincou user-3=hirefootballgame user-4=pugwash user-5=paulmca1 user-6=howardon user-7=cwsocial user-8=reliable user-9=ninejimm user-10=cambria1 user-11=cathski user-12=tigerlet user-13=barbersh user-14=hidden user-15=nomistakes user-16=smrszyqg user-17=isleofwi user-18=ctedorgu user-19=philmcph user-20=firstre5 user-21=donnychicago user-22=steakbridieme user-23=lkpier user-24=health2045 user-25=fortunaz user-26=foods user-27=leftie user-28=nscdp user-29=dhyana user-30=eatspam user-31=darkstar user-32=beauty user-33=nsceres user-34=burydropin user-35=fawcettd user-36=steve user-37=zebrapho user-38=bwppodcast user-39=sibtoncc user-40=asandcoc user-41=design user-42=kategilpin user-43=ladburyp user-44=dancinggardener user-45=stagingerris user-46=nvihkvu user-47=sketchy user-48=cath
Sep 27 16:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=havantho user-50=what user-51=oubpgvbx user-52=tstardom user-53=sosevalu user-54=crrtipdl user-55=bakery user-56=boldover user-57=nove user-58=romaldki user-59=branko user-60=outdoorc user-61=hodgsonmail user-62=ranxterc user-63=onlycont user-64=attlebor user-65=lucy user-66=careers user-67=nbhavers user-68=david user-69=mcdermos user-70=chrisdal user-71=jennimil user-72=tomandle user-73=magichat user-74=lbhyisi user-75=hhdugcor user-76=ptkxhsbt user-77=dickemery123 user-78=martsblo user-79=musorguk user-80=megacards user-81=wilsonsw user-82=sarafoundation user-83=atestord user-84=strathar user-85=brmrjxl user-86=lakesan1 user-87=leereyn1 user-88=stephani user-89=still user-90=agproduc user-91=hodgesonweb user-92=theblack user-93=spectrum user-94=jarvisin user-95=ulsukarm user-96=maflemin user-97=lbscrmod user-98=connect9 user-99=athenare user-100=vantagep user-101=booff user-102=markward
Sep 27 16:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=foundation user-104=nativene user-105=stuartge user-106=askhform user-107=innovat1 user-108=skyfirec user-109=alexadmin user-110=bemadonn user-111=belle user-112=ggaaorgu user-113=newstoda user-114=bedfords user-115=battlere user-116=oneoarco user-117=firstre2 user-118=vivienn1 user-119=brighto1 user-120=nstriton user-121=thqkgnbz user-122=connectedshoppin user-123=ianrayne user-124=accooper user-125=carsinyo user-126=fetch user-127=hubmaster user-128=elecleis user-129=milloyco user-130=gilpin user-131=southlon user-132=highlegh user-133=firstred user-134=costestimatorco user-135=clarkass user-136=firstrel user-137=coursemc user-138=opaiscyx user-139=firstres user-140=jonhartl user-141=seftvta user-142=ultbcrra feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 16:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 16:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:53 nativespace-cdp sudo[13201]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 16:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:54 nativespace-cdp sudo[13211]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pEmAPUpeQV44CR6Z.~
Sep 27 16:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:54 nativespace-cdp sudo[13214]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pEmAPUpeQV44CR6Z.~'
Sep 27 16:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:55 nativespace-cdp sudo[13217]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pEmAPUpeQV44CR6Z.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 16:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:55 nativespace-cdp sudo[13221]: pam_unix(sudo:session): session closed for user root
Sep 27 16:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 16:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:09:55 nativespace-cdp sudo[13224]: pam_unix(sudo:session): session closed for user root
Sep 27 16:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 16:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 16:10:23 nativespace-cdp sudo[13540]: pam_unix(sudo:session): session closed for user root
Sep 27 16:11:33 nativespace-cdp sshd[14012]: Connection closed by 159.100.136.21 port 50388 [preauth]
Sep 27 16:16:33 nativespace-cdp sshd[15254]: Connection closed by 159.100.136.21 port 60146 [preauth]
Sep 27 16:21:33 nativespace-cdp sshd[16683]: Connection closed by 159.100.136.21 port 41420 [preauth]
Sep 27 16:26:34 nativespace-cdp sshd[17818]: Connection closed by 159.100.136.21 port 51466 [preauth]
Sep 27 16:31:33 nativespace-cdp sshd[19126]: Connection closed by 159.100.136.21 port 33076 [preauth]
Sep 27 16:36:37 nativespace-cdp sshd[20339]: Connection closed by 159.100.136.21 port 43030 [preauth]
Sep 27 16:41:33 nativespace-cdp sshd[21412]: Connection closed by 159.100.136.21 port 52476 [preauth]
Sep 27 16:46:33 nativespace-cdp sshd[22921]: Connection closed by 159.100.136.21 port 33990 [preauth]
Sep 27 16:51:33 nativespace-cdp sshd[24196]: Connection closed by 159.100.136.21 port 43470 [preauth]
Sep 27 16:56:33 nativespace-cdp sshd[25345]: Connection closed by 159.100.136.21 port 53340 [preauth]
Sep 27 17:01:33 nativespace-cdp sshd[26860]: Connection closed by 159.100.136.21 port 34776 [preauth]
Sep 27 17:06:33 nativespace-cdp sshd[28312]: Connection closed by 159.100.136.21 port 44374 [preauth]
Sep 27 17:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 17:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:37 nativespace-cdp sudo[28930]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 17:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:37 nativespace-cdp sudo[28933]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 17:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:40 nativespace-cdp sudo[28936]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 17:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:40 nativespace-cdp sudo[28945]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 17:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:55 nativespace-cdp sudo[28948]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 17:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:55 nativespace-cdp sudo[28995]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 17:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:55 nativespace-cdp sudo[28999]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 17:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:55 nativespace-cdp sudo[29002]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 17:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:55 nativespace-cdp sudo[29005]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 17:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:56 nativespace-cdp sudo[29010]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 17:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:56 nativespace-cdp sudo[29015]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:09:58 nativespace-cdp sudo[29022]: pam_unix(sudo:session): session closed for user root
Sep 27 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:10:04 nativespace-cdp sudo[29029]: pam_unix(sudo:session): session closed for user root
Sep 27 17:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=boldover user-2=nove user-3=sosevalu user-4=crrtipdl user-5=bakery user-6=nvihkvu user-7=sketchy user-8=cath user-9=havantho user-10=what user-11=oubpgvbx user-12=tstardom user-13=design user-14=kategilpin user-15=ladburyp user-16=stagingerris user-17=dancinggardener user-18=jennimil user-19=tomandle user-20=careers user-21=nbhavers user-22=david user-23=mcdermos user-24=chrisdal user-25=onlycont user-26=attlebor user-27=lucy user-28=romaldki user-29=branko user-30=outdoorc user-31=ranxterc user-32=hodgsonmail user-33=ctedorgu user-34=philmcph user-35=donnychicago user-36=firstre5 user-37=steakbridieme user-38=lkpier user-39=fortunaz user-40=health2045 user-41=leftie user-42=foods user-43=nscdp user-44=tigerlet user-45=barbersh user-46=hidden user-47=nomistakes user-48=smrszyqg user-49=isleofwi
Sep 27 17:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=pugwash user-51=paulmca1 user-52=howardon user-53=cwsocial user-54=reliable user-55=ninejimm user-56=cambria1 user-57=cathski user-58=courseme user-59=eugincou user-60=hirefootballgame user-61=asandcoc user-62=sibtoncc user-63=steve user-64=zebrapho user-65=bwppodcast user-66=nsceres user-67=burydropin user-68=fawcettd user-69=dhyana user-70=eatspam user-71=darkstar user-72=beauty user-73=battlere user-74=oneoarco user-75=firstre2 user-76=vivienn1 user-77=brighto1 user-78=nstriton user-79=bemadonn user-80=ggaaorgu user-81=belle user-82=newstoda user-83=bedfords user-84=skyfirec user-85=alexadmin user-86=nativene user-87=askhform user-88=stuartge user-89=innovat1 user-90=coursemc user-91=opaiscyx user-92=firstres user-93=seftvta user-94=jonhartl user-95=ultbcrra user-96=southlon user-97=highlegh user-98=firstred user-99=costestimatorco user-100=clarkass user-101=firstrel user-102=carsinyo user-103=fetch
Sep 27 17:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=hubmaster user-105=elecleis user-106=gilpin user-107=milloyco user-108=thqkgnbz user-109=connectedshoppin user-110=ianrayne user-111=accooper user-112=sarafoundation user-113=atestord user-114=strathar user-115=lakesan1 user-116=brmrjxl user-117=musorguk user-118=megacards user-119=wilsonsw user-120=ptkxhsbt user-121=dickemery123 user-122=martsblo user-123=magichat user-124=lbhyisi user-125=hhdugcor user-126=maflemin user-127=lbscrmod user-128=athenare user-129=connect9 user-130=vantagep user-131=markward user-132=foundation user-133=booff user-134=ulsukarm user-135=hodgesonweb user-136=theblack user-137=spectrum user-138=jarvisin user-139=leereyn1 user-140=stephani user-141=still user-142=agproduc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 17:10:04 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 17:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:10:08 nativespace-cdp sudo[29160]: pam_unix(sudo:session): session closed for user root
Sep 27 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 17:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:10:08 nativespace-cdp sudo[29180]: pam_unix(sudo:session): session closed for user root
Sep 27 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TCUB6trvrYHVb2HU.~
Sep 27 17:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:10:08 nativespace-cdp sudo[29184]: pam_unix(sudo:session): session closed for user root
Sep 27 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TCUB6trvrYHVb2HU.~'
Sep 27 17:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:10:08 nativespace-cdp sudo[29187]: pam_unix(sudo:session): session closed for user root
Sep 27 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TCUB6trvrYHVb2HU.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 17:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:10:09 nativespace-cdp sudo[29191]: pam_unix(sudo:session): session closed for user root
Sep 27 17:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 17:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:10:09 nativespace-cdp sudo[29194]: pam_unix(sudo:session): session closed for user root
Sep 27 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 17:10:11 nativespace-cdp sudo[29219]: pam_unix(sudo:session): session closed for user root
Sep 27 17:11:36 nativespace-cdp sshd[29479]: Connection closed by 159.100.136.21 port 53864 [preauth]
Sep 27 17:16:33 nativespace-cdp sshd[30910]: Connection closed by 159.100.136.21 port 35340 [preauth]
Sep 27 17:20:32 nativespace-cdp sshd[31876]: Accepted publickey for root from 185.67.178.249 port 34424 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 27 17:20:32 nativespace-cdp sshd[31876]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 27 17:21:35 nativespace-cdp sshd[32145]: Connection closed by 159.100.136.21 port 44534 [preauth]
Sep 27 17:26:33 nativespace-cdp sshd[1145]: Connection closed by 159.100.136.21 port 54334 [preauth]
Sep 27 17:31:34 nativespace-cdp sshd[2882]: Connection closed by 159.100.136.21 port 35586 [preauth]
Sep 27 17:36:35 nativespace-cdp sshd[3989]: Connection closed by 159.100.136.21 port 45528 [preauth]
Sep 27 17:41:33 nativespace-cdp sshd[4999]: Connection closed by 159.100.136.21 port 54846 [preauth]
Sep 27 17:44:45 nativespace-cdp sshd[5937]: pam_unix(sshd:session): session closed for user root
Sep 27 17:46:34 nativespace-cdp sshd[6759]: Connection closed by 159.100.136.21 port 36388 [preauth]
Sep 27 17:51:37 nativespace-cdp sshd[7980]: Connection closed by 159.100.136.21 port 45868 [preauth]
Sep 27 17:56:34 nativespace-cdp sshd[9047]: Connection closed by 159.100.136.21 port 55524 [preauth]
Sep 27 18:01:34 nativespace-cdp sshd[10596]: Connection closed by 159.100.136.21 port 37036 [preauth]
Sep 27 18:06:34 nativespace-cdp sshd[11837]: Connection closed by 159.100.136.21 port 46216 [preauth]
Sep 27 18:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 18:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:44 nativespace-cdp sudo[12437]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 18:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:44 nativespace-cdp sudo[12440]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 18:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:48 nativespace-cdp sudo[12444]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 18:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:48 nativespace-cdp sudo[12463]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 18:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:52 nativespace-cdp sudo[12467]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 18:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:52 nativespace-cdp sudo[12481]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 18:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:52 nativespace-cdp sudo[12484]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 18:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:52 nativespace-cdp sudo[12487]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 18:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:52 nativespace-cdp sudo[12490]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 18:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:52 nativespace-cdp sudo[12493]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 18:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:53 nativespace-cdp sudo[12496]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 18:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:55 nativespace-cdp sudo[12503]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 18:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:57 nativespace-cdp sudo[12513]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=nativene user-4=innovat1 user-5=stuartge user-6=askhform user-7=firstre2 user-8=vivienn1 user-9=battlere user-10=oneoarco user-11=brighto1 user-12=nstriton user-13=belle user-14=ggaaorgu user-15=newstoda user-16=bemadonn user-17=bedfords user-18=hubmaster user-19=carsinyo user-20=fetch user-21=milloyco user-22=gilpin user-23=elecleis user-24=connectedshoppin user-25=thqkgnbz user-26=accooper user-27=ianrayne user-28=coursemc user-29=opaiscyx user-30=seftvta user-31=jonhartl user-32=ultbcrra user-33=firstres user-34=firstred user-35=southlon user-36=highlegh user-37=firstrel user-38=clarkass user-39=costestimatorco user-40=dickemery123 user-41=ptkxhsbt user-42=martsblo user-43=magichat user-44=lbhyisi user-45=hhdugcor user-46=strathar user-47=sarafoundation
Sep 27 18:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=atestord user-49=lakesan1 user-50=brmrjxl user-51=musorguk user-52=megacards user-53=wilsonsw user-54=spectrum user-55=theblack user-56=hodgesonweb user-57=jarvisin user-58=stephani user-59=leereyn1 user-60=still user-61=agproduc user-62=connect9 user-63=athenare user-64=vantagep user-65=maflemin user-66=lbscrmod user-67=markward user-68=booff user-69=foundation user-70=ulsukarm user-71=sketchy user-72=cath user-73=havantho user-74=nvihkvu user-75=oubpgvbx user-76=tstardom user-77=what user-78=design user-79=ladburyp user-80=dancinggardener user-81=stagingerris user-82=kategilpin user-83=boldover user-84=nove user-85=bakery user-86=sosevalu user-87=crrtipdl user-88=onlycont user-89=attlebor user-90=lucy user-91=romaldki user-92=outdoorc user-93=ranxterc user-94=hodgsonmail user-95=branko user-96=jennimil user-97=tomandle user-98=careers user-99=nbhavers user-100=david user-101=chrisdal user-102=mcdermos
Sep 27 18:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=howardon user-104=paulmca1 user-105=pugwash user-106=cwsocial user-107=cathski user-108=cambria1 user-109=ninejimm user-110=reliable user-111=eugincou user-112=courseme user-113=hirefootballgame user-114=lkpier user-115=philmcph user-116=ctedorgu user-117=steakbridieme user-118=firstre5 user-119=donnychicago user-120=nscdp user-121=fortunaz user-122=health2045 user-123=foods user-124=leftie user-125=hidden user-126=nomistakes user-127=barbersh user-128=tigerlet user-129=smrszyqg user-130=isleofwi user-131=nsceres user-132=burydropin user-133=fawcettd user-134=dhyana user-135=beauty user-136=eatspam user-137=darkstar user-138=sibtoncc user-139=asandcoc user-140=steve user-141=bwppodcast user-142=zebrapho feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 18:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 18:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:58 nativespace-cdp sudo[12522]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:59 nativespace-cdp sudo[12527]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SkIq0M23TwuaUr1v.~
Sep 27 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:59 nativespace-cdp sudo[12530]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SkIq0M23TwuaUr1v.~'
Sep 27 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:59 nativespace-cdp sudo[12533]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SkIq0M23TwuaUr1v.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:59 nativespace-cdp sudo[12537]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:09:59 nativespace-cdp sudo[12540]: pam_unix(sudo:session): session closed for user root
Sep 27 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 27 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:10:00 nativespace-cdp sudo[12544]: pam_unix(sudo:session): session closed for user root
Sep 27 18:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 18:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 18:10:07 nativespace-cdp sudo[12671]: pam_unix(sudo:session): session closed for user root
Sep 27 18:11:34 nativespace-cdp sshd[12960]: Connection closed by 159.100.136.21 port 55662 [preauth]
Sep 27 18:16:34 nativespace-cdp sshd[14232]: Connection closed by 159.100.136.21 port 37194 [preauth]
Sep 27 18:21:33 nativespace-cdp sshd[15486]: Connection closed by 159.100.136.21 port 46370 [preauth]
Sep 27 18:26:33 nativespace-cdp sshd[16586]: Connection closed by 159.100.136.21 port 56148 [preauth]
Sep 27 18:31:34 nativespace-cdp sshd[17934]: Connection closed by 159.100.136.21 port 37348 [preauth]
Sep 27 18:35:36 nativespace-cdp sshd[18981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.137.75.74  user=david
Sep 27 18:35:38 nativespace-cdp sshd[18981]: Failed password for david from 103.137.75.74 port 45820 ssh2
Sep 27 18:35:38 nativespace-cdp sshd[18981]: Received disconnect from 103.137.75.74 port 45820:11: Bye Bye [preauth]
Sep 27 18:35:38 nativespace-cdp sshd[18981]: Disconnected from 103.137.75.74 port 45820 [preauth]
Sep 27 18:36:33 nativespace-cdp sshd[19112]: Connection closed by 159.100.136.21 port 46878 [preauth]
Sep 27 18:37:09 nativespace-cdp sshd[19213]: Invalid user admin from 103.137.75.74 port 40266
Sep 27 18:37:09 nativespace-cdp sshd[19213]: input_userauth_request: invalid user admin [preauth]
Sep 27 18:37:09 nativespace-cdp sshd[19213]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 18:37:09 nativespace-cdp sshd[19213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.137.75.74
Sep 27 18:37:12 nativespace-cdp sshd[19213]: Failed password for invalid user admin from 103.137.75.74 port 40266 ssh2
Sep 27 18:37:12 nativespace-cdp sshd[19213]: Received disconnect from 103.137.75.74 port 40266:11: Bye Bye [preauth]
Sep 27 18:37:12 nativespace-cdp sshd[19213]: Disconnected from 103.137.75.74 port 40266 [preauth]
Sep 27 18:38:11 nativespace-cdp sshd[19457]: Invalid user adminftp from 103.137.75.74 port 38686
Sep 27 18:38:11 nativespace-cdp sshd[19457]: input_userauth_request: invalid user adminftp [preauth]
Sep 27 18:38:11 nativespace-cdp sshd[19457]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 18:38:11 nativespace-cdp sshd[19457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.137.75.74
Sep 27 18:38:13 nativespace-cdp sshd[19457]: Failed password for invalid user adminftp from 103.137.75.74 port 38686 ssh2
Sep 27 18:41:33 nativespace-cdp sshd[20168]: Connection closed by 159.100.136.21 port 56164 [preauth]
Sep 27 18:46:33 nativespace-cdp sshd[21611]: Connection closed by 159.100.136.21 port 37834 [preauth]
Sep 27 18:51:34 nativespace-cdp sshd[22636]: Connection closed by 159.100.136.21 port 47096 [preauth]
Sep 27 18:56:36 nativespace-cdp sshd[23592]: Connection closed by 159.100.136.21 port 56860 [preauth]
Sep 27 19:01:33 nativespace-cdp sshd[24764]: Connection closed by 159.100.136.21 port 37800 [preauth]
Sep 27 19:06:33 nativespace-cdp sshd[25818]: Connection closed by 159.100.136.21 port 47342 [preauth]
Sep 27 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:37 nativespace-cdp sudo[26801]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:37 nativespace-cdp sudo[26805]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:39 nativespace-cdp sudo[26808]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 19:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:39 nativespace-cdp sudo[26818]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 19:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:43 nativespace-cdp sudo[26821]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:43 nativespace-cdp sudo[26836]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:43 nativespace-cdp sudo[26839]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:43 nativespace-cdp sudo[26842]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:43 nativespace-cdp sudo[26845]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:43 nativespace-cdp sudo[26849]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:43 nativespace-cdp sudo[26852]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:09:57 nativespace-cdp sudo[26880]: pam_unix(sudo:session): session closed for user root
Sep 27 19:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 19:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:10:02 nativespace-cdp sudo[26884]: pam_unix(sudo:session): session closed for user root
Sep 27 19:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ianrayne user-2=accooper user-3=thqkgnbz user-4=connectedshoppin user-5=elecleis user-6=gilpin user-7=milloyco user-8=carsinyo user-9=fetch user-10=hubmaster user-11=costestimatorco user-12=firstrel user-13=clarkass user-14=southlon user-15=highlegh user-16=firstred user-17=firstres user-18=jonhartl user-19=seftvta user-20=ultbcrra user-21=coursemc user-22=opaiscyx user-23=askhform user-24=stuartge user-25=innovat1 user-26=nativene user-27=skyfirec user-28=alexadmin user-29=bedfords user-30=bemadonn user-31=belle user-32=ggaaorgu user-33=newstoda user-34=brighto1 user-35=nstriton user-36=battlere user-37=oneoarco user-38=firstre2 user-39=vivienn1 user-40=still user-41=agproduc user-42=leereyn1 user-43=stephani user-44=jarvisin user-45=theblack user-46=hodgesonweb user-47=spectrum
Sep 27 19:10:02 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=markward user-50=booff user-51=foundation user-52=maflemin user-53=lbscrmod user-54=connect9 user-55=athenare user-56=vantagep user-57=lbhyisi user-58=hhdugcor user-59=magichat user-60=martsblo user-61=ptkxhsbt user-62=dickemery123 user-63=wilsonsw user-64=musorguk user-65=megacards user-66=brmrjxl user-67=lakesan1 user-68=sarafoundation user-69=atestord user-70=strathar user-71=branko user-72=outdoorc user-73=hodgsonmail user-74=ranxterc user-75=romaldki user-76=attlebor user-77=lucy user-78=onlycont user-79=mcdermos user-80=chrisdal user-81=nbhavers user-82=careers user-83=david user-84=tomandle user-85=jennimil user-86=kategilpin user-87=ladburyp user-88=dancinggardener user-89=stagingerris user-90=design user-91=what user-92=oubpgvbx user-93=tstardom user-94=nvihkvu user-95=sketchy user-96=cath user-97=havantho user-98=sosevalu user-99=crrtipdl user-100=bakery user-101=nove
Sep 27 19:10:02 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=boldover user-103=eatspam user-104=darkstar user-105=beauty user-106=dhyana user-107=burydropin user-108=fawcettd user-109=nsceres user-110=zebrapho user-111=bwppodcast user-112=steve user-113=asandcoc user-114=sibtoncc user-115=hirefootballgame user-116=courseme user-117=eugincou user-118=ninejimm user-119=reliable user-120=cambria1 user-121=cathski user-122=howardon user-123=paulmca1 user-124=pugwash user-125=cwsocial user-126=smrszyqg user-127=isleofwi user-128=tigerlet user-129=barbersh user-130=hidden user-131=nomistakes user-132=fortunaz user-133=health2045 user-134=foods user-135=leftie user-136=nscdp user-137=ctedorgu user-138=philmcph user-139=firstre5 user-140=donnychicago user-141=steakbridieme user-142=lkpier feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 27 19:10:02 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 19:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:10:07 nativespace-cdp sudo[26975]: pam_unix(sudo:session): session closed for user root
Sep 27 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:10:08 nativespace-cdp sudo[27040]: pam_unix(sudo:session): session closed for user root
Sep 27 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-whclglV2jUrK2yfs.~
Sep 27 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:10:08 nativespace-cdp sudo[27046]: pam_unix(sudo:session): session closed for user root
Sep 27 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-whclglV2jUrK2yfs.~'
Sep 27 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:10:08 nativespace-cdp sudo[27049]: pam_unix(sudo:session): session closed for user root
Sep 27 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-whclglV2jUrK2yfs.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:10:08 nativespace-cdp sudo[27054]: pam_unix(sudo:session): session closed for user root
Sep 27 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:10:08 nativespace-cdp sudo[27057]: pam_unix(sudo:session): session closed for user root
Sep 27 19:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 19:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 19:10:11 nativespace-cdp sudo[27081]: pam_unix(sudo:session): session closed for user root
Sep 27 19:11:33 nativespace-cdp sshd[27325]: Connection closed by 159.100.136.21 port 56336 [preauth]
Sep 27 19:16:38 nativespace-cdp sshd[28857]: Connection closed by 159.100.136.21 port 37862 [preauth]
Sep 27 19:21:36 nativespace-cdp sshd[29942]: Connection closed by 159.100.136.21 port 47540 [preauth]
Sep 27 19:26:34 nativespace-cdp sshd[30955]: Connection closed by 159.100.136.21 port 56936 [preauth]
Sep 27 19:31:33 nativespace-cdp sshd[32546]: Connection closed by 159.100.136.21 port 38370 [preauth]
Sep 27 19:34:50 nativespace-cdp sshd[31876]: pam_unix(sshd:session): session closed for user root
Sep 27 19:36:33 nativespace-cdp sshd[1265]: Connection closed by 159.100.136.21 port 48326 [preauth]
Sep 27 19:41:33 nativespace-cdp sshd[2356]: Connection closed by 159.100.136.21 port 57900 [preauth]
Sep 27 19:46:35 nativespace-cdp sshd[4053]: Connection closed by 159.100.136.21 port 39602 [preauth]
Sep 27 19:51:34 nativespace-cdp sshd[5130]: Connection closed by 159.100.136.21 port 49440 [preauth]
Sep 27 19:56:33 nativespace-cdp sshd[6224]: Connection closed by 159.100.136.21 port 59226 [preauth]
Sep 27 20:01:33 nativespace-cdp sshd[7424]: Connection closed by 159.100.136.21 port 40644 [preauth]
Sep 27 20:06:35 nativespace-cdp sshd[8601]: Connection closed by 159.100.136.21 port 50768 [preauth]
Sep 27 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:36 nativespace-cdp sudo[9552]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:36 nativespace-cdp sudo[9555]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 20:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:39 nativespace-cdp sudo[9558]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:39 nativespace-cdp sudo[9566]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:43 nativespace-cdp sudo[9569]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:43 nativespace-cdp sudo[9589]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:43 nativespace-cdp sudo[9592]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:43 nativespace-cdp sudo[9596]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:43 nativespace-cdp sudo[9599]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:43 nativespace-cdp sudo[9602]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:43 nativespace-cdp sudo[9606]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:45 nativespace-cdp sudo[9617]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:51 nativespace-cdp sudo[9622]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=opaiscyx user-2=coursemc user-3=ultbcrra user-4=seftvta user-5=jonhartl user-6=firstres user-7=firstred user-8=highlegh user-9=southlon user-10=clarkass user-11=firstrel user-12=costestimatorco user-13=hubmaster user-14=fetch user-15=carsinyo user-16=milloyco user-17=gilpin user-18=elecleis user-19=connectedshoppin user-20=thqkgnbz user-21=accooper user-22=ianrayne user-23=vivienn1 user-24=firstre2 user-25=oneoarco user-26=battlere user-27=nstriton user-28=brighto1 user-29=newstoda user-30=belle user-31=ggaaorgu user-32=bemadonn user-33=bedfords user-34=alexadmin user-35=skyfirec user-36=nativene user-37=innovat1 user-38=stuartge user-39=askhform user-40=vantagep user-41=connect9 user-42=athenare user-43=lbscrmod user-44=maflemin user-45=markward user-46=booff user-47=foundation user-48=ulsukarm
Sep 27 20:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=spectrum user-50=hodgesonweb user-51=theblack user-52=jarvisin user-53=stephani user-54=leereyn1 user-55=agproduc user-56=still user-57=strathar user-58=atestord user-59=sarafoundation user-60=brmrjxl user-61=lakesan1 user-62=megacards user-63=musorguk user-64=wilsonsw user-65=dickemery123 user-66=ptkxhsbt user-67=martsblo user-68=magichat user-69=hhdugcor user-70=lbhyisi user-71=jennimil user-72=tomandle user-73=david user-74=nbhavers user-75=careers user-76=chrisdal user-77=mcdermos user-78=onlycont user-79=lucy user-80=attlebor user-81=romaldki user-82=outdoorc user-83=ranxterc user-84=hodgsonmail user-85=branko user-86=boldover user-87=nove user-88=bakery user-89=crrtipdl user-90=sosevalu user-91=havantho user-92=sketchy user-93=cath user-94=nvihkvu user-95=oubpgvbx user-96=tstardom user-97=what user-98=design user-99=stagingerris user-100=dancinggardener user-101=ladburyp user-102=kategilpin
Sep 27 20:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=asandcoc user-104=sibtoncc user-105=steve user-106=bwppodcast user-107=zebrapho user-108=nsceres user-109=fawcettd user-110=burydropin user-111=dhyana user-112=beauty user-113=darkstar user-114=eatspam user-115=lkpier user-116=firstre5 user-117=steakbridieme user-118=donnychicago user-119=ctedorgu user-120=philmcph user-121=nscdp user-122=foods user-123=leftie user-124=health2045 user-125=fortunaz user-126=nomistakes user-127=hidden user-128=barbersh user-129=tigerlet user-130=smrszyqg user-131=isleofwi user-132=cwsocial user-133=howardon user-134=pugwash user-135=paulmca1 user-136=cathski user-137=cambria1 user-138=reliable user-139=ninejimm user-140=eugincou user-141=courseme user-142=hirefootballgame feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 20:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 20:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:53 nativespace-cdp sudo[9643]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 20:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:53 nativespace-cdp sudo[9649]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TEQdi6vgEg1wLu0i.~
Sep 27 20:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:53 nativespace-cdp sudo[9653]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TEQdi6vgEg1wLu0i.~'
Sep 27 20:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:53 nativespace-cdp sudo[9656]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TEQdi6vgEg1wLu0i.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 20:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:53 nativespace-cdp sudo[9660]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 20:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:53 nativespace-cdp sudo[9663]: pam_unix(sudo:session): session closed for user root
Sep 27 20:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 20:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 20:09:56 nativespace-cdp sudo[9684]: pam_unix(sudo:session): session closed for user root
Sep 27 20:11:34 nativespace-cdp sshd[10098]: Connection closed by 159.100.136.21 port 60388 [preauth]
Sep 27 20:16:33 nativespace-cdp sshd[11420]: Connection closed by 159.100.136.21 port 42028 [preauth]
Sep 27 20:21:33 nativespace-cdp sshd[12524]: Connection closed by 159.100.136.21 port 51614 [preauth]
Sep 27 20:26:34 nativespace-cdp sshd[13549]: Connection closed by 159.100.136.21 port 33372 [preauth]
Sep 27 20:31:33 nativespace-cdp sshd[14720]: Connection closed by 159.100.136.21 port 43086 [preauth]
Sep 27 20:36:36 nativespace-cdp sshd[15981]: Connection closed by 159.100.136.21 port 52854 [preauth]
Sep 27 20:41:33 nativespace-cdp sshd[17074]: Connection closed by 159.100.136.21 port 33884 [preauth]
Sep 27 20:46:33 nativespace-cdp sshd[18475]: Connection closed by 159.100.136.21 port 43676 [preauth]
Sep 27 20:51:36 nativespace-cdp sshd[19571]: Connection closed by 159.100.136.21 port 52888 [preauth]
Sep 27 20:56:33 nativespace-cdp sshd[20759]: Connection closed by 159.100.136.21 port 34404 [preauth]
Sep 27 21:01:34 nativespace-cdp sshd[22130]: Connection closed by 159.100.136.21 port 43874 [preauth]
Sep 27 21:06:33 nativespace-cdp sshd[23397]: Connection closed by 159.100.136.21 port 53826 [preauth]
Sep 27 21:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 21:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:34 nativespace-cdp sudo[23987]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 21:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:34 nativespace-cdp sudo[23991]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 21:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:38 nativespace-cdp sudo[23994]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:38 nativespace-cdp sudo[23999]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:42 nativespace-cdp sudo[24002]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:42 nativespace-cdp sudo[24023]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:42 nativespace-cdp sudo[24026]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:42 nativespace-cdp sudo[24029]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:42 nativespace-cdp sudo[24032]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:42 nativespace-cdp sudo[24035]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:42 nativespace-cdp sudo[24039]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 21:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:57 nativespace-cdp sudo[24082]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 21:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:09:59 nativespace-cdp sudo[24089]: pam_unix(sudo:session): session closed for user root
Sep 27 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nscdp user-2=leftie user-3=foods user-4=health2045 user-5=fortunaz user-6=lkpier user-7=firstre5 user-8=steakbridieme user-9=donnychicago user-10=ctedorgu user-11=philmcph user-12=isleofwi user-13=smrszyqg user-14=nomistakes user-15=hidden user-16=barbersh user-17=tigerlet user-18=cambria1 user-19=cathski user-20=reliable user-21=ninejimm user-22=cwsocial user-23=pugwash user-24=paulmca1 user-25=howardon user-26=hirefootballgame user-27=eugincou user-28=courseme user-29=sibtoncc user-30=asandcoc user-31=bwppodcast user-32=zebrapho user-33=steve user-34=fawcettd user-35=burydropin user-36=nsceres user-37=beauty user-38=darkstar user-39=eatspam user-40=dhyana user-41=nove user-42=boldover user-43=bakery user-44=crrtipdl user-45=sosevalu user-46=oubpgvbx user-47=tstardom user-48=what
Sep 27 21:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=havantho user-50=cath user-51=sketchy user-52=nvihkvu user-53=dancinggardener user-54=stagingerris user-55=ladburyp user-56=kategilpin user-57=design user-58=tomandle user-59=jennimil user-60=chrisdal user-61=mcdermos user-62=david user-63=careers user-64=nbhavers user-65=lucy user-66=attlebor user-67=onlycont user-68=hodgsonmail user-69=outdoorc user-70=ranxterc user-71=branko user-72=romaldki user-73=lakesan1 user-74=brmrjxl user-75=strathar user-76=atestord user-77=sarafoundation user-78=wilsonsw user-79=megacards user-80=musorguk user-81=martsblo user-82=dickemery123 user-83=ptkxhsbt user-84=hhdugcor user-85=lbhyisi user-86=magichat user-87=markward user-88=booff user-89=foundation user-90=vantagep user-91=athenare user-92=connect9 user-93=lbscrmod user-94=maflemin user-95=ulsukarm user-96=jarvisin user-97=spectrum user-98=theblack user-99=hodgesonweb user-100=agproduc user-101=still user-102=stephani
Sep 27 21:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=leereyn1 user-104=nstriton user-105=brighto1 user-106=vivienn1 user-107=firstre2 user-108=oneoarco user-109=battlere user-110=bedfords user-111=newstoda user-112=belle user-113=ggaaorgu user-114=bemadonn user-115=skyfirec user-116=alexadmin user-117=innovat1 user-118=stuartge user-119=askhform user-120=nativene user-121=ultbcrra user-122=seftvta user-123=jonhartl user-124=firstres user-125=coursemc user-126=opaiscyx user-127=clarkass user-128=firstrel user-129=costestimatorco user-130=firstred user-131=highlegh user-132=southlon user-133=milloyco user-134=gilpin user-135=elecleis user-136=hubmaster user-137=fetch user-138=carsinyo user-139=accooper user-140=ianrayne user-141=connectedshoppin user-142=thqkgnbz feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 21:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:10:00 nativespace-cdp sudo[24096]: pam_unix(sudo:session): session closed for user root
Sep 27 21:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 21:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:10:01 nativespace-cdp sudo[24104]: pam_unix(sudo:session): session closed for user root
Sep 27 21:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iDxw6XT0zrNuRrW0.~
Sep 27 21:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:10:01 nativespace-cdp sudo[24107]: pam_unix(sudo:session): session closed for user root
Sep 27 21:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iDxw6XT0zrNuRrW0.~'
Sep 27 21:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:10:01 nativespace-cdp sudo[24110]: pam_unix(sudo:session): session closed for user root
Sep 27 21:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iDxw6XT0zrNuRrW0.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 21:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:10:01 nativespace-cdp sudo[24114]: pam_unix(sudo:session): session closed for user root
Sep 27 21:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 21:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:10:01 nativespace-cdp sudo[24117]: pam_unix(sudo:session): session closed for user root
Sep 27 21:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 21:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:10:22 nativespace-cdp sudo[24348]: pam_unix(sudo:session): session closed for user root
Sep 27 21:11:33 nativespace-cdp sshd[24538]: Connection closed by 159.100.136.21 port 35118 [preauth]
Sep 27 21:16:33 nativespace-cdp sshd[25879]: Connection closed by 159.100.136.21 port 44640 [preauth]
Sep 27 21:21:33 nativespace-cdp sshd[26927]: Connection closed by 159.100.136.21 port 53530 [preauth]
Sep 27 21:26:36 nativespace-cdp sshd[27962]: Connection closed by 159.100.136.21 port 35074 [preauth]
Sep 27 21:31:33 nativespace-cdp sshd[29473]: Connection closed by 159.100.136.21 port 44650 [preauth]
Sep 27 21:36:33 nativespace-cdp sshd[30580]: Connection closed by 159.100.136.21 port 54558 [preauth]
Sep 27 21:41:33 nativespace-cdp sshd[31760]: Connection closed by 159.100.136.21 port 35990 [preauth]
Sep 27 21:43:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 21:43:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:43:17 nativespace-cdp sudo[32081]: pam_unix(sudo:session): session closed for user root
Sep 27 21:43:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 27 21:43:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 21:43:19 nativespace-cdp sudo[32088]: pam_unix(sudo:session): session closed for user root
Sep 27 21:46:33 nativespace-cdp sshd[747]: Connection closed by 159.100.136.21 port 45908 [preauth]
Sep 27 21:51:34 nativespace-cdp sshd[2210]: Connection closed by 159.100.136.21 port 55504 [preauth]
Sep 27 21:56:33 nativespace-cdp sshd[3235]: Connection closed by 159.100.136.21 port 36994 [preauth]
Sep 27 22:01:34 nativespace-cdp sshd[4815]: Connection closed by 159.100.136.21 port 46650 [preauth]
Sep 27 22:06:33 nativespace-cdp sshd[5877]: Connection closed by 159.100.136.21 port 56808 [preauth]
Sep 27 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:34 nativespace-cdp sudo[6442]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:34 nativespace-cdp sudo[6446]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:35 nativespace-cdp sudo[6449]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 22:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:35 nativespace-cdp sudo[6454]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 22:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:39 nativespace-cdp sudo[6457]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:39 nativespace-cdp sudo[6474]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:39 nativespace-cdp sudo[6477]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:39 nativespace-cdp sudo[6480]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:39 nativespace-cdp sudo[6483]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:39 nativespace-cdp sudo[6486]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:39 nativespace-cdp sudo[6490]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 22:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:41 nativespace-cdp sudo[6497]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 22:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:47 nativespace-cdp sudo[6503]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dhyana user-2=beauty user-3=eatspam user-4=darkstar user-5=nsceres user-6=burydropin user-7=fawcettd user-8=steve user-9=bwppodcast user-10=zebrapho user-11=sibtoncc user-12=asandcoc user-13=eugincou user-14=courseme user-15=hirefootballgame user-16=pugwash user-17=paulmca1 user-18=howardon user-19=cwsocial user-20=cathski user-21=cambria1 user-22=reliable user-23=ninejimm user-24=hidden user-25=nomistakes user-26=barbersh user-27=tigerlet user-28=isleofwi user-29=smrszyqg user-30=lkpier user-31=ctedorgu user-32=philmcph user-33=steakbridieme user-34=firstre5 user-35=donnychicago user-36=nscdp user-37=health2045 user-38=fortunaz user-39=foods user-40=leftie user-41=romaldki user-42=outdoorc user-43=hodgsonmail user-44=ranxterc user-45=branko user-46=onlycont user-47=attlebor user-48=lucy
Sep 27 22:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=nbhavers user-50=careers user-51=david user-52=chrisdal user-53=mcdermos user-54=jennimil user-55=tomandle user-56=design user-57=ladburyp user-58=dancinggardener user-59=stagingerris user-60=kategilpin user-61=sketchy user-62=cath user-63=havantho user-64=nvihkvu user-65=tstardom user-66=oubpgvbx user-67=what user-68=bakery user-69=sosevalu user-70=crrtipdl user-71=boldover user-72=nove user-73=stephani user-74=leereyn1 user-75=still user-76=agproduc user-77=spectrum user-78=theblack user-79=hodgesonweb user-80=jarvisin user-81=ulsukarm user-82=connect9 user-83=athenare user-84=vantagep user-85=maflemin user-86=lbscrmod user-87=foundation user-88=markward user-89=booff user-90=magichat user-91=lbhyisi user-92=hhdugcor user-93=dickemery123 user-94=ptkxhsbt user-95=martsblo user-96=musorguk user-97=megacards user-98=wilsonsw user-99=strathar user-100=sarafoundation user-101=atestord user-102=lakesan1
Sep 27 22:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=brmrjxl user-104=connectedshoppin user-105=thqkgnbz user-106=accooper user-107=ianrayne user-108=hubmaster user-109=carsinyo user-110=fetch user-111=gilpin user-112=milloyco user-113=elecleis user-114=firstred user-115=southlon user-116=highlegh user-117=clarkass user-118=firstrel user-119=costestimatorco user-120=coursemc user-121=opaiscyx user-122=seftvta user-123=jonhartl user-124=ultbcrra user-125=firstres user-126=nativene user-127=innovat1 user-128=stuartge user-129=askhform user-130=skyfirec user-131=alexadmin user-132=ggaaorgu user-133=belle user-134=newstoda user-135=bemadonn user-136=bedfords user-137=firstre2 user-138=vivienn1 user-139=battlere user-140=oneoarco user-141=brighto1 user-142=nstriton feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 27 22:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 22:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:49 nativespace-cdp sudo[6518]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:49 nativespace-cdp sudo[6523]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sW6jBZNl8PC5gvFY.~
Sep 27 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:49 nativespace-cdp sudo[6526]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sW6jBZNl8PC5gvFY.~'
Sep 27 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:49 nativespace-cdp sudo[6530]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sW6jBZNl8PC5gvFY.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:49 nativespace-cdp sudo[6534]: pam_unix(sudo:session): session closed for user root
Sep 27 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:09:49 nativespace-cdp sudo[6537]: pam_unix(sudo:session): session closed for user root
Sep 27 22:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 22:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 22:10:04 nativespace-cdp sudo[6700]: pam_unix(sudo:session): session closed for user root
Sep 27 22:11:34 nativespace-cdp sshd[6964]: Connection closed by 159.100.136.21 port 38136 [preauth]
Sep 27 22:16:33 nativespace-cdp sshd[8354]: Connection closed by 159.100.136.21 port 47864 [preauth]
Sep 27 22:21:35 nativespace-cdp sshd[9607]: Connection closed by 159.100.136.21 port 57694 [preauth]
Sep 27 22:26:33 nativespace-cdp sshd[10616]: Connection closed by 159.100.136.21 port 39320 [preauth]
Sep 27 22:31:32 nativespace-cdp sshd[11892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.199.224.2  user=root
Sep 27 22:31:32 nativespace-cdp sshd[11892]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 27 22:31:33 nativespace-cdp sshd[11916]: Connection closed by 159.100.136.21 port 48930 [preauth]
Sep 27 22:31:34 nativespace-cdp sshd[11892]: Failed password for root from 60.199.224.2 port 39154 ssh2
Sep 27 22:31:34 nativespace-cdp sshd[11892]: Received disconnect from 60.199.224.2 port 39154:11: Bye Bye [preauth]
Sep 27 22:31:34 nativespace-cdp sshd[11892]: Disconnected from 60.199.224.2 port 39154 [preauth]
Sep 27 22:32:40 nativespace-cdp sshd[12095]: Invalid user minecraft from 64.227.150.241 port 59794
Sep 27 22:32:40 nativespace-cdp sshd[12095]: input_userauth_request: invalid user minecraft [preauth]
Sep 27 22:32:40 nativespace-cdp sshd[12095]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 22:32:40 nativespace-cdp sshd[12095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.150.241
Sep 27 22:32:42 nativespace-cdp sshd[12095]: Failed password for invalid user minecraft from 64.227.150.241 port 59794 ssh2
Sep 27 22:32:49 nativespace-cdp sshd[12095]: Received disconnect from 64.227.150.241 port 59794:11: Bye Bye [preauth]
Sep 27 22:32:49 nativespace-cdp sshd[12095]: Disconnected from 64.227.150.241 port 59794 [preauth]
Sep 27 22:36:20 nativespace-cdp sshd[13117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.111.32.174  user=root
Sep 27 22:36:20 nativespace-cdp sshd[13117]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 27 22:36:22 nativespace-cdp sshd[13117]: Failed password for root from 27.111.32.174 port 38960 ssh2
Sep 27 22:36:22 nativespace-cdp sshd[13117]: Received disconnect from 27.111.32.174 port 38960:11: Bye Bye [preauth]
Sep 27 22:36:22 nativespace-cdp sshd[13117]: Disconnected from 27.111.32.174 port 38960 [preauth]
Sep 27 22:36:35 nativespace-cdp sshd[13181]: Connection closed by 159.100.136.21 port 58686 [preauth]
Sep 27 22:37:30 nativespace-cdp sshd[13321]: Invalid user postgres from 60.199.224.2 port 39170
Sep 27 22:37:30 nativespace-cdp sshd[13321]: input_userauth_request: invalid user postgres [preauth]
Sep 27 22:37:30 nativespace-cdp sshd[13321]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 22:37:30 nativespace-cdp sshd[13321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.199.224.2
Sep 27 22:37:32 nativespace-cdp sshd[13321]: Failed password for invalid user postgres from 60.199.224.2 port 39170 ssh2
Sep 27 22:37:32 nativespace-cdp sshd[13321]: Received disconnect from 60.199.224.2 port 39170:11: Bye Bye [preauth]
Sep 27 22:37:32 nativespace-cdp sshd[13321]: Disconnected from 60.199.224.2 port 39170 [preauth]
Sep 27 22:37:48 nativespace-cdp sshd[13371]: Invalid user postgres from 64.227.150.241 port 57128
Sep 27 22:37:48 nativespace-cdp sshd[13371]: input_userauth_request: invalid user postgres [preauth]
Sep 27 22:37:48 nativespace-cdp sshd[13371]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 22:37:48 nativespace-cdp sshd[13371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.150.241
Sep 27 22:37:50 nativespace-cdp sshd[13371]: Failed password for invalid user postgres from 64.227.150.241 port 57128 ssh2
Sep 27 22:37:52 nativespace-cdp sshd[13371]: Received disconnect from 64.227.150.241 port 57128:11: Bye Bye [preauth]
Sep 27 22:37:52 nativespace-cdp sshd[13371]: Disconnected from 64.227.150.241 port 57128 [preauth]
Sep 27 22:38:07 nativespace-cdp sshd[13423]: Invalid user radix from 27.111.32.174 port 46146
Sep 27 22:38:07 nativespace-cdp sshd[13423]: input_userauth_request: invalid user radix [preauth]
Sep 27 22:38:07 nativespace-cdp sshd[13423]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 22:38:07 nativespace-cdp sshd[13423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.111.32.174
Sep 27 22:38:10 nativespace-cdp sshd[13423]: Failed password for invalid user radix from 27.111.32.174 port 46146 ssh2
Sep 27 22:38:10 nativespace-cdp sshd[13423]: Received disconnect from 27.111.32.174 port 46146:11: Bye Bye [preauth]
Sep 27 22:38:10 nativespace-cdp sshd[13423]: Disconnected from 27.111.32.174 port 46146 [preauth]
Sep 27 22:38:19 nativespace-cdp sshd[13452]: Invalid user user2 from 60.199.224.2 port 39188
Sep 27 22:38:19 nativespace-cdp sshd[13452]: input_userauth_request: invalid user user2 [preauth]
Sep 27 22:38:19 nativespace-cdp sshd[13452]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 22:38:19 nativespace-cdp sshd[13452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.199.224.2
Sep 27 22:38:22 nativespace-cdp sshd[13452]: Failed password for invalid user user2 from 60.199.224.2 port 39188 ssh2
Sep 27 22:38:22 nativespace-cdp sshd[13452]: Received disconnect from 60.199.224.2 port 39188:11: Bye Bye [preauth]
Sep 27 22:38:22 nativespace-cdp sshd[13452]: Disconnected from 60.199.224.2 port 39188 [preauth]
Sep 27 22:38:34 nativespace-cdp sshd[13508]: Invalid user sysadmin from 64.227.150.241 port 57346
Sep 27 22:38:34 nativespace-cdp sshd[13508]: input_userauth_request: invalid user sysadmin [preauth]
Sep 27 22:38:34 nativespace-cdp sshd[13508]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 22:38:34 nativespace-cdp sshd[13508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.150.241
Sep 27 22:38:36 nativespace-cdp sshd[13508]: Failed password for invalid user sysadmin from 64.227.150.241 port 57346 ssh2
Sep 27 22:38:36 nativespace-cdp sshd[13508]: Received disconnect from 64.227.150.241 port 57346:11: Bye Bye [preauth]
Sep 27 22:38:36 nativespace-cdp sshd[13508]: Disconnected from 64.227.150.241 port 57346 [preauth]
Sep 27 22:38:55 nativespace-cdp sshd[13674]: Invalid user smart from 27.111.32.174 port 43788
Sep 27 22:38:55 nativespace-cdp sshd[13674]: input_userauth_request: invalid user smart [preauth]
Sep 27 22:38:55 nativespace-cdp sshd[13674]: pam_unix(sshd:auth): check pass; user unknown
Sep 27 22:38:55 nativespace-cdp sshd[13674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.111.32.174
Sep 27 22:38:57 nativespace-cdp sshd[13674]: Failed password for invalid user smart from 27.111.32.174 port 43788 ssh2
Sep 27 22:38:57 nativespace-cdp sshd[13674]: Received disconnect from 27.111.32.174 port 43788:11: Bye Bye [preauth]
Sep 27 22:38:57 nativespace-cdp sshd[13674]: Disconnected from 27.111.32.174 port 43788 [preauth]
Sep 27 22:39:24 nativespace-cdp sshd[13773]: Did not receive identification string from 199.45.155.64 port 32950
Sep 27 22:39:44 nativespace-cdp sshd[13786]: Connection closed by 199.45.155.64 port 42768 [preauth]
Sep 27 22:41:33 nativespace-cdp sshd[14252]: Connection closed by 159.100.136.21 port 39702 [preauth]
Sep 27 22:46:34 nativespace-cdp sshd[15733]: Connection closed by 159.100.136.21 port 49326 [preauth]
Sep 27 22:51:33 nativespace-cdp sshd[16726]: Connection closed by 159.100.136.21 port 58830 [preauth]
Sep 27 22:56:33 nativespace-cdp sshd[17703]: Connection closed by 159.100.136.21 port 40708 [preauth]
Sep 27 23:01:37 nativespace-cdp sshd[19173]: Connection reset by 159.100.136.21 port 50076 [preauth]
Sep 27 23:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 27 23:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:36 nativespace-cdp sudo[20804]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 27 23:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:36 nativespace-cdp sudo[20808]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 27 23:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:39 nativespace-cdp sudo[20812]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 27 23:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:39 nativespace-cdp sudo[20824]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 27 23:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:43 nativespace-cdp sudo[20828]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 27 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:43 nativespace-cdp sudo[20850]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 27 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:44 nativespace-cdp sudo[20853]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 27 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:44 nativespace-cdp sudo[20856]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 27 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:44 nativespace-cdp sudo[20859]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 27 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:44 nativespace-cdp sudo[20862]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 27 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:44 nativespace-cdp sudo[20866]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 27 23:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:52 nativespace-cdp sudo[20896]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 27 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:53 nativespace-cdp sudo[20904]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=newstoda user-2=ggaaorgu user-3=belle user-4=bemadonn user-5=bedfords user-6=vivienn1 user-7=firstre2 user-8=oneoarco user-9=battlere user-10=nstriton user-11=brighto1 user-12=nativene user-13=innovat1 user-14=stuartge user-15=askhform user-16=alexadmin user-17=skyfirec user-18=firstred user-19=highlegh user-20=southlon user-21=firstrel user-22=clarkass user-23=costestimatorco user-24=opaiscyx user-25=coursemc user-26=ultbcrra user-27=jonhartl user-28=seftvta user-29=firstres user-30=connectedshoppin user-31=thqkgnbz user-32=accooper user-33=ianrayne user-34=hubmaster user-35=fetch user-36=carsinyo user-37=gilpin user-38=milloyco user-39=elecleis user-40=megacards user-41=musorguk user-42=wilsonsw user-43=strathar user-44=atestord user-45=sarafoundation user-46=brmrjxl user-47=lakesan1
Sep 27 23:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=magichat user-49=hhdugcor user-50=lbhyisi user-51=dickemery123 user-52=ptkxhsbt user-53=martsblo user-54=ulsukarm user-55=vantagep user-56=athenare user-57=connect9 user-58=lbscrmod user-59=maflemin user-60=foundation user-61=markward user-62=booff user-63=stephani user-64=leereyn1 user-65=agproduc user-66=still user-67=spectrum user-68=hodgesonweb user-69=theblack user-70=jarvisin user-71=bakery user-72=crrtipdl user-73=sosevalu user-74=boldover user-75=nove user-76=design user-77=stagingerris user-78=dancinggardener user-79=ladburyp user-80=kategilpin user-81=havantho user-82=cath user-83=sketchy user-84=nvihkvu user-85=tstardom user-86=oubpgvbx user-87=what user-88=david user-89=careers user-90=nbhavers user-91=chrisdal user-92=mcdermos user-93=jennimil user-94=tomandle user-95=romaldki user-96=outdoorc user-97=ranxterc user-98=hodgsonmail user-99=branko user-100=onlycont user-101=lucy
Sep 27 23:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=attlebor user-103=nomistakes user-104=hidden user-105=tigerlet user-106=barbersh user-107=smrszyqg user-108=isleofwi user-109=lkpier user-110=donnychicago user-111=firstre5 user-112=steakbridieme user-113=ctedorgu user-114=philmcph user-115=nscdp user-116=leftie user-117=foods user-118=fortunaz user-119=health2045 user-120=eugincou user-121=courseme user-122=hirefootballgame user-123=cwsocial user-124=paulmca1 user-125=pugwash user-126=howardon user-127=cambria1 user-128=cathski user-129=reliable user-130=ninejimm user-131=steve user-132=bwppodcast user-133=zebrapho user-134=sibtoncc user-135=asandcoc user-136=dhyana user-137=beauty user-138=darkstar user-139=eatspam user-140=nsceres user-141=fawcettd user-142=burydropin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 27 23:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 27 23:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:56 nativespace-cdp sudo[20911]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:56 nativespace-cdp sudo[20918]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Oh2P3pwzqOfMg5sZ.~
Sep 27 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:56 nativespace-cdp sudo[20922]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Oh2P3pwzqOfMg5sZ.~'
Sep 27 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:56 nativespace-cdp sudo[20925]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Oh2P3pwzqOfMg5sZ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 27 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:56 nativespace-cdp sudo[20929]: pam_unix(sudo:session): session closed for user root
Sep 27 23:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 27 23:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:09:57 nativespace-cdp sudo[20932]: pam_unix(sudo:session): session closed for user root
Sep 27 23:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 27 23:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 27 23:10:08 nativespace-cdp sudo[21078]: pam_unix(sudo:session): session closed for user root
Sep 27 23:11:33 nativespace-cdp sshd[21357]: Connection closed by 159.100.136.21 port 40098 [preauth]
Sep 27 23:16:33 nativespace-cdp sshd[22642]: Connection closed by 159.100.136.21 port 49592 [preauth]
Sep 27 23:21:33 nativespace-cdp sshd[23722]: Connection closed by 159.100.136.21 port 59044 [preauth]
Sep 27 23:26:33 nativespace-cdp sshd[24579]: Connection closed by 159.100.136.21 port 40728 [preauth]
Sep 27 23:31:33 nativespace-cdp sshd[25936]: Connection closed by 159.100.136.21 port 50250 [preauth]
Sep 27 23:36:36 nativespace-cdp sshd[26903]: Connection closed by 159.100.136.21 port 60324 [preauth]
Sep 27 23:41:33 nativespace-cdp sshd[28369]: Connection closed by 159.100.136.21 port 41736 [preauth]
Sep 27 23:46:35 nativespace-cdp sshd[29661]: Connection closed by 159.100.136.21 port 51562 [preauth]
Sep 27 23:51:37 nativespace-cdp sshd[30755]: Connection closed by 159.100.136.21 port 60958 [preauth]
Sep 27 23:56:33 nativespace-cdp sshd[466]: Connection closed by 159.100.136.21 port 42598 [preauth]
Sep 28 00:01:33 nativespace-cdp sshd[2382]: Connection closed by 159.100.136.21 port 51750 [preauth]
Sep 28 00:06:33 nativespace-cdp sshd[3344]: Connection closed by 159.100.136.21 port 33252 [preauth]
Sep 28 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:33 nativespace-cdp sudo[3876]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:33 nativespace-cdp sudo[3880]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:35 nativespace-cdp sudo[3883]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 00:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:35 nativespace-cdp sudo[3889]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 00:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:40 nativespace-cdp sudo[3892]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:40 nativespace-cdp sudo[3908]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:40 nativespace-cdp sudo[3911]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:40 nativespace-cdp sudo[3914]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:40 nativespace-cdp sudo[3917]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:40 nativespace-cdp sudo[3920]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:40 nativespace-cdp sudo[3923]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 00:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:43 nativespace-cdp sudo[3934]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 00:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:43 nativespace-cdp sudo[3941]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ianrayne user-2=accooper user-3=thqkgnbz user-4=connectedshoppin user-5=elecleis user-6=gilpin user-7=milloyco user-8=carsinyo user-9=fetch user-10=hubmaster user-11=costestimatorco user-12=clarkass user-13=firstrel user-14=southlon user-15=highlegh user-16=firstred user-17=firstres user-18=jonhartl user-19=seftvta user-20=ultbcrra user-21=coursemc user-22=opaiscyx user-23=askhform user-24=stuartge user-25=innovat1 user-26=nativene user-27=alexadmin user-28=skyfirec user-29=bedfords user-30=bemadonn user-31=ggaaorgu user-32=belle user-33=newstoda user-34=brighto1 user-35=nstriton user-36=battlere user-37=oneoarco user-38=firstre2 user-39=vivienn1 user-40=still user-41=agproduc user-42=leereyn1 user-43=stephani user-44=jarvisin user-45=hodgesonweb user-46=theblack user-47=spectrum
Sep 28 00:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=booff user-50=markward user-51=foundation user-52=maflemin user-53=lbscrmod user-54=connect9 user-55=athenare user-56=vantagep user-57=lbhyisi user-58=hhdugcor user-59=magichat user-60=martsblo user-61=ptkxhsbt user-62=dickemery123 user-63=wilsonsw user-64=musorguk user-65=megacards user-66=brmrjxl user-67=lakesan1 user-68=sarafoundation user-69=atestord user-70=strathar user-71=branko user-72=outdoorc user-73=hodgsonmail user-74=ranxterc user-75=romaldki user-76=attlebor user-77=lucy user-78=onlycont user-79=mcdermos user-80=chrisdal user-81=careers user-82=nbhavers user-83=david user-84=tomandle user-85=jennimil user-86=kategilpin user-87=ladburyp user-88=dancinggardener user-89=stagingerris user-90=design user-91=what user-92=tstardom user-93=oubpgvbx user-94=nvihkvu user-95=sketchy user-96=cath user-97=havantho user-98=sosevalu user-99=crrtipdl user-100=bakery user-101=nove
Sep 28 00:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=boldover user-103=eatspam user-104=darkstar user-105=beauty user-106=dhyana user-107=burydropin user-108=fawcettd user-109=nsceres user-110=zebrapho user-111=bwppodcast user-112=steve user-113=asandcoc user-114=sibtoncc user-115=hirefootballgame user-116=courseme user-117=eugincou user-118=ninejimm user-119=reliable user-120=cathski user-121=cambria1 user-122=howardon user-123=paulmca1 user-124=pugwash user-125=cwsocial user-126=smrszyqg user-127=isleofwi user-128=tigerlet user-129=barbersh user-130=hidden user-131=nomistakes user-132=fortunaz user-133=health2045 user-134=foods user-135=leftie user-136=nscdp user-137=ctedorgu user-138=philmcph user-139=firstre5 user-140=steakbridieme user-141=donnychicago user-142=lkpier feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 28 00:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 00:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:45 nativespace-cdp sudo[3946]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 00:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:45 nativespace-cdp sudo[3954]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3I4tyXOlhq4Hg3uh.~
Sep 28 00:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:45 nativespace-cdp sudo[3958]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3I4tyXOlhq4Hg3uh.~'
Sep 28 00:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:45 nativespace-cdp sudo[3961]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3I4tyXOlhq4Hg3uh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 00:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:46 nativespace-cdp sudo[3965]: pam_unix(sudo:session): session closed for user root
Sep 28 00:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 00:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:09:46 nativespace-cdp sudo[3968]: pam_unix(sudo:session): session closed for user root
Sep 28 00:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 00:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 00:10:32 nativespace-cdp sudo[4281]: pam_unix(sudo:session): session closed for user root
Sep 28 00:11:33 nativespace-cdp sshd[4451]: Connection closed by 159.100.136.21 port 42762 [preauth]
Sep 28 00:16:33 nativespace-cdp sshd[5810]: Connection closed by 159.100.136.21 port 52658 [preauth]
Sep 28 00:21:33 nativespace-cdp sshd[6794]: Connection closed by 159.100.136.21 port 33684 [preauth]
Sep 28 00:26:35 nativespace-cdp sshd[7831]: Connection closed by 159.100.136.21 port 43456 [preauth]
Sep 28 00:31:36 nativespace-cdp sshd[9242]: Connection closed by 159.100.136.21 port 53080 [preauth]
Sep 28 00:36:33 nativespace-cdp sshd[10163]: Connection closed by 159.100.136.21 port 34314 [preauth]
Sep 28 00:41:33 nativespace-cdp sshd[11263]: Connection closed by 159.100.136.21 port 43608 [preauth]
Sep 28 00:46:33 nativespace-cdp sshd[12671]: Connection closed by 159.100.136.21 port 52618 [preauth]
Sep 28 00:51:33 nativespace-cdp sshd[13696]: Connection closed by 159.100.136.21 port 33592 [preauth]
Sep 28 00:56:33 nativespace-cdp sshd[14652]: Connection closed by 159.100.136.21 port 43214 [preauth]
Sep 28 01:01:36 nativespace-cdp sshd[16133]: Connection closed by 159.100.136.21 port 52436 [preauth]
Sep 28 01:06:36 nativespace-cdp sshd[17208]: Connection closed by 159.100.136.21 port 34166 [preauth]
Sep 28 01:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 01:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:14 nativespace-cdp sudo[17621]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 01:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:14 nativespace-cdp sudo[17624]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 01:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:15 nativespace-cdp sudo[17627]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 01:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:15 nativespace-cdp sudo[17632]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 01:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:18 nativespace-cdp sudo[17635]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:18 nativespace-cdp sudo[17645]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:18 nativespace-cdp sudo[17648]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:18 nativespace-cdp sudo[17651]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:18 nativespace-cdp sudo[17654]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:18 nativespace-cdp sudo[17657]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 01:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:18 nativespace-cdp sudo[17660]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 01:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:20 nativespace-cdp sudo[17668]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 01:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:20 nativespace-cdp sudo[17673]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sibtoncc user-2=asandcoc user-3=steve user-4=zebrapho user-5=bwppodcast user-6=nsceres user-7=burydropin user-8=fawcettd user-9=dhyana user-10=eatspam user-11=darkstar user-12=beauty user-13=philmcph user-14=ctedorgu user-15=firstre5 user-16=donnychicago user-17=steakbridieme user-18=lkpier user-19=fortunaz user-20=health2045 user-21=leftie user-22=foods user-23=nscdp user-24=barbersh user-25=tigerlet user-26=hidden user-27=nomistakes user-28=isleofwi user-29=smrszyqg user-30=paulmca1 user-31=pugwash user-32=howardon user-33=cwsocial user-34=ninejimm user-35=reliable user-36=cathski user-37=cambria1 user-38=courseme user-39=eugincou user-40=hirefootballgame user-41=jennimil user-42=tomandle user-43=careers user-44=nbhavers user-45=david user-46=mcdermos user-47=chrisdal user-48=onlycont
Sep 28 01:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=attlebor user-50=lucy user-51=romaldki user-52=branko user-53=outdoorc user-54=hodgsonmail user-55=ranxterc user-56=boldover user-57=nove user-58=sosevalu user-59=crrtipdl user-60=bakery user-61=nvihkvu user-62=cath user-63=sketchy user-64=havantho user-65=what user-66=tstardom user-67=oubpgvbx user-68=design user-69=kategilpin user-70=ladburyp user-71=stagingerris user-72=dancinggardener user-73=maflemin user-74=lbscrmod user-75=athenare user-76=connect9 user-77=vantagep user-78=foundation user-79=markward user-80=booff user-81=ulsukarm user-82=theblack user-83=hodgesonweb user-84=spectrum user-85=jarvisin user-86=leereyn1 user-87=stephani user-88=still user-89=agproduc user-90=sarafoundation user-91=atestord user-92=strathar user-93=lakesan1 user-94=brmrjxl user-95=musorguk user-96=megacards user-97=wilsonsw user-98=ptkxhsbt user-99=dickemery123 user-100=martsblo user-101=magichat user-102=lbhyisi
Sep 28 01:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=hhdugcor user-104=coursemc user-105=opaiscyx user-106=firstres user-107=seftvta user-108=jonhartl user-109=ultbcrra user-110=southlon user-111=highlegh user-112=firstred user-113=costestimatorco user-114=firstrel user-115=clarkass user-116=carsinyo user-117=fetch user-118=hubmaster user-119=elecleis user-120=gilpin user-121=milloyco user-122=thqkgnbz user-123=connectedshoppin user-124=ianrayne user-125=accooper user-126=battlere user-127=oneoarco user-128=firstre2 user-129=vivienn1 user-130=brighto1 user-131=nstriton user-132=bemadonn user-133=belle user-134=ggaaorgu user-135=newstoda user-136=bedfords user-137=alexadmin user-138=skyfirec user-139=nativene user-140=stuartge user-141=askhform user-142=innovat1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 01:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 01:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:21 nativespace-cdp sudo[17677]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:21 nativespace-cdp sudo[17681]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-26BPUHSTqEmGMfCt.~
Sep 28 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:21 nativespace-cdp sudo[17684]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-26BPUHSTqEmGMfCt.~'
Sep 28 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:21 nativespace-cdp sudo[17688]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-26BPUHSTqEmGMfCt.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:21 nativespace-cdp sudo[17692]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:21 nativespace-cdp sudo[17695]: pam_unix(sudo:session): session closed for user root
Sep 28 01:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 01:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 01:09:22 nativespace-cdp sudo[17714]: pam_unix(sudo:session): session closed for user root
Sep 28 01:11:36 nativespace-cdp sshd[18295]: Connection closed by 159.100.136.21 port 43566 [preauth]
Sep 28 01:16:35 nativespace-cdp sshd[19599]: Connection closed by 159.100.136.21 port 53246 [preauth]
Sep 28 01:21:33 nativespace-cdp sshd[20749]: Connection closed by 159.100.136.21 port 34528 [preauth]
Sep 28 01:26:37 nativespace-cdp sshd[21715]: Connection closed by 159.100.136.21 port 44492 [preauth]
Sep 28 01:31:33 nativespace-cdp sshd[23099]: Connection closed by 159.100.136.21 port 53860 [preauth]
Sep 28 01:36:35 nativespace-cdp sshd[24105]: Connection closed by 159.100.136.21 port 35796 [preauth]
Sep 28 01:41:35 nativespace-cdp sshd[25086]: Connection closed by 159.100.136.21 port 45140 [preauth]
Sep 28 01:42:30 nativespace-cdp sshd[25242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.55.190.18  user=root
Sep 28 01:42:30 nativespace-cdp sshd[25242]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 01:42:32 nativespace-cdp sshd[25242]: Failed password for root from 191.55.190.18 port 38999 ssh2
Sep 28 01:42:32 nativespace-cdp sshd[25242]: Received disconnect from 191.55.190.18 port 38999:11: Bye Bye [preauth]
Sep 28 01:42:32 nativespace-cdp sshd[25242]: Disconnected from 191.55.190.18 port 38999 [preauth]
Sep 28 01:46:17 nativespace-cdp sshd[26400]: Received disconnect from 191.55.190.18 port 59906:11: Bye Bye [preauth]
Sep 28 01:46:17 nativespace-cdp sshd[26400]: Disconnected from 191.55.190.18 port 59906 [preauth]
Sep 28 01:46:34 nativespace-cdp sshd[26486]: Connection closed by 159.100.136.21 port 54970 [preauth]
Sep 28 01:47:04 nativespace-cdp sshd[26583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.55.190.18  user=root
Sep 28 01:47:04 nativespace-cdp sshd[26583]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 01:47:06 nativespace-cdp sshd[26583]: Failed password for root from 191.55.190.18 port 38926 ssh2
Sep 28 01:47:08 nativespace-cdp sshd[26583]: Received disconnect from 191.55.190.18 port 38926:11: Bye Bye [preauth]
Sep 28 01:47:09 nativespace-cdp sshd[26583]: Disconnected from 191.55.190.18 port 38926 [preauth]
Sep 28 01:47:56 nativespace-cdp sshd[26697]: Invalid user postgres from 191.55.190.18 port 58564
Sep 28 01:47:56 nativespace-cdp sshd[26697]: input_userauth_request: invalid user postgres [preauth]
Sep 28 01:47:56 nativespace-cdp sshd[26697]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 01:47:56 nativespace-cdp sshd[26697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.55.190.18
Sep 28 01:47:57 nativespace-cdp sshd[26697]: Failed password for invalid user postgres from 191.55.190.18 port 58564 ssh2
Sep 28 01:47:58 nativespace-cdp sshd[26697]: Received disconnect from 191.55.190.18 port 58564:11: Bye Bye [preauth]
Sep 28 01:47:58 nativespace-cdp sshd[26697]: Disconnected from 191.55.190.18 port 58564 [preauth]
Sep 28 01:51:33 nativespace-cdp sshd[27552]: Connection closed by 159.100.136.21 port 36230 [preauth]
Sep 28 01:56:34 nativespace-cdp sshd[28485]: Connection closed by 159.100.136.21 port 46112 [preauth]
Sep 28 02:01:34 nativespace-cdp sshd[29898]: Connection closed by 159.100.136.21 port 55736 [preauth]
Sep 28 02:06:33 nativespace-cdp sshd[30884]: Connection closed by 159.100.136.21 port 36994 [preauth]
Sep 28 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:20 nativespace-cdp sudo[31353]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:20 nativespace-cdp sudo[31356]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:21 nativespace-cdp sudo[31359]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 02:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:21 nativespace-cdp sudo[31366]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 02:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:22 nativespace-cdp sudo[31369]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 02:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:23 nativespace-cdp sudo[31380]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 02:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:23 nativespace-cdp sudo[31383]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 02:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:23 nativespace-cdp sudo[31388]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 02:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:23 nativespace-cdp sudo[31392]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 02:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:23 nativespace-cdp sudo[31396]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 02:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:23 nativespace-cdp sudo[31399]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:24 nativespace-cdp sudo[31408]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 02:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:25 nativespace-cdp sudo[31413]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=brighto1 user-2=nstriton user-3=firstre2 user-4=vivienn1 user-5=battlere user-6=oneoarco user-7=bedfords user-8=belle user-9=ggaaorgu user-10=newstoda user-11=bemadonn user-12=skyfirec user-13=alexadmin user-14=innovat1 user-15=askhform user-16=stuartge user-17=nativene user-18=seftvta user-19=jonhartl user-20=ultbcrra user-21=firstres user-22=coursemc user-23=opaiscyx user-24=clarkass user-25=firstrel user-26=costestimatorco user-27=firstred user-28=southlon user-29=highlegh user-30=gilpin user-31=milloyco user-32=elecleis user-33=hubmaster user-34=carsinyo user-35=fetch user-36=accooper user-37=ianrayne user-38=connectedshoppin user-39=thqkgnbz user-40=lakesan1 user-41=brmrjxl user-42=strathar user-43=sarafoundation user-44=atestord user-45=wilsonsw user-46=musorguk user-47=megacards
Sep 28 02:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=martsblo user-49=dickemery123 user-50=ptkxhsbt user-51=lbhyisi user-52=hhdugcor user-53=magichat user-54=markward user-55=foundation user-56=booff user-57=connect9 user-58=athenare user-59=vantagep user-60=maflemin user-61=lbscrmod user-62=ulsukarm user-63=jarvisin user-64=spectrum user-65=hodgesonweb user-66=theblack user-67=still user-68=agproduc user-69=stephani user-70=leereyn1 user-71=nove user-72=boldover user-73=bakery user-74=sosevalu user-75=crrtipdl user-76=tstardom user-77=oubpgvbx user-78=what user-79=cath user-80=sketchy user-81=havantho user-82=nvihkvu user-83=ladburyp user-84=stagingerris user-85=dancinggardener user-86=kategilpin user-87=design user-88=tomandle user-89=jennimil user-90=chrisdal user-91=mcdermos user-92=nbhavers user-93=careers user-94=david user-95=attlebor user-96=lucy user-97=onlycont user-98=outdoorc user-99=hodgsonmail user-100=ranxterc user-101=branko
Sep 28 02:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=romaldki user-103=nscdp user-104=health2045 user-105=fortunaz user-106=foods user-107=leftie user-108=lkpier user-109=philmcph user-110=ctedorgu user-111=steakbridieme user-112=firstre5 user-113=donnychicago user-114=isleofwi user-115=smrszyqg user-116=hidden user-117=nomistakes user-118=tigerlet user-119=barbersh user-120=cathski user-121=cambria1 user-122=ninejimm user-123=reliable user-124=pugwash user-125=paulmca1 user-126=howardon user-127=cwsocial user-128=hirefootballgame user-129=eugincou user-130=courseme user-131=asandcoc user-132=sibtoncc user-133=bwppodcast user-134=zebrapho user-135=steve user-136=burydropin user-137=fawcettd user-138=nsceres user-139=beauty user-140=eatspam user-141=darkstar user-142=dhyana feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 28 02:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 02:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:26 nativespace-cdp sudo[31417]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 02:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:26 nativespace-cdp sudo[31423]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WhwR6JIh6HNQxklV.~
Sep 28 02:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:26 nativespace-cdp sudo[31427]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WhwR6JIh6HNQxklV.~'
Sep 28 02:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:26 nativespace-cdp sudo[31430]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WhwR6JIh6HNQxklV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 02:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:26 nativespace-cdp sudo[31434]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 02:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:26 nativespace-cdp sudo[31437]: pam_unix(sudo:session): session closed for user root
Sep 28 02:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 02:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 02:09:39 nativespace-cdp sudo[31483]: pam_unix(sudo:session): session closed for user root
Sep 28 02:11:33 nativespace-cdp sshd[31986]: Connection closed by 159.100.136.21 port 46488 [preauth]
Sep 28 02:16:33 nativespace-cdp sshd[873]: Connection closed by 159.100.136.21 port 56262 [preauth]
Sep 28 02:21:33 nativespace-cdp sshd[1865]: Connection closed by 159.100.136.21 port 37522 [preauth]
Sep 28 02:26:33 nativespace-cdp sshd[2777]: Connection closed by 159.100.136.21 port 47414 [preauth]
Sep 28 02:27:04 nativespace-cdp sshd[2846]: Bad protocol version identification '\003' from 91.238.181.35 port 65315
Sep 28 02:31:33 nativespace-cdp sshd[3814]: Connection closed by 159.100.136.21 port 57158 [preauth]
Sep 28 02:36:33 nativespace-cdp sshd[4901]: Connection closed by 159.100.136.21 port 38694 [preauth]
Sep 28 02:41:35 nativespace-cdp sshd[6000]: Connection closed by 159.100.136.21 port 48042 [preauth]
Sep 28 02:44:54 nativespace-cdp sshd[6736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.254.0.234  user=root
Sep 28 02:44:54 nativespace-cdp sshd[6736]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 02:44:56 nativespace-cdp sshd[6736]: Failed password for root from 94.254.0.234 port 45876 ssh2
Sep 28 02:44:56 nativespace-cdp sshd[6736]: Received disconnect from 94.254.0.234 port 45876:11: Bye Bye [preauth]
Sep 28 02:44:56 nativespace-cdp sshd[6736]: Disconnected from 94.254.0.234 port 45876 [preauth]
Sep 28 02:46:10 nativespace-cdp sshd[7213]: Invalid user minecraft from 193.70.1.27 port 33424
Sep 28 02:46:10 nativespace-cdp sshd[7213]: input_userauth_request: invalid user minecraft [preauth]
Sep 28 02:46:10 nativespace-cdp sshd[7213]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 02:46:10 nativespace-cdp sshd[7213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.27
Sep 28 02:46:12 nativespace-cdp sshd[7213]: Failed password for invalid user minecraft from 193.70.1.27 port 33424 ssh2
Sep 28 02:46:12 nativespace-cdp sshd[7213]: Received disconnect from 193.70.1.27 port 33424:11: Bye Bye [preauth]
Sep 28 02:46:12 nativespace-cdp sshd[7213]: Disconnected from 193.70.1.27 port 33424 [preauth]
Sep 28 02:46:33 nativespace-cdp sshd[7261]: Connection closed by 159.100.136.21 port 57950 [preauth]
Sep 28 02:46:59 nativespace-cdp sshd[7314]: Invalid user mosquitto from 193.70.1.27 port 54924
Sep 28 02:46:59 nativespace-cdp sshd[7314]: input_userauth_request: invalid user mosquitto [preauth]
Sep 28 02:46:59 nativespace-cdp sshd[7314]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 02:46:59 nativespace-cdp sshd[7314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.27
Sep 28 02:47:01 nativespace-cdp sshd[7314]: Failed password for invalid user mosquitto from 193.70.1.27 port 54924 ssh2
Sep 28 02:47:01 nativespace-cdp sshd[7314]: Received disconnect from 193.70.1.27 port 54924:11: Bye Bye [preauth]
Sep 28 02:47:01 nativespace-cdp sshd[7314]: Disconnected from 193.70.1.27 port 54924 [preauth]
Sep 28 02:47:15 nativespace-cdp sshd[7348]: Invalid user portal from 94.254.0.234 port 41490
Sep 28 02:47:15 nativespace-cdp sshd[7348]: input_userauth_request: invalid user portal [preauth]
Sep 28 02:47:15 nativespace-cdp sshd[7348]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 02:47:15 nativespace-cdp sshd[7348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.254.0.234
Sep 28 02:47:17 nativespace-cdp sshd[7348]: Failed password for invalid user portal from 94.254.0.234 port 41490 ssh2
Sep 28 02:47:17 nativespace-cdp sshd[7348]: Received disconnect from 94.254.0.234 port 41490:11: Bye Bye [preauth]
Sep 28 02:47:17 nativespace-cdp sshd[7348]: Disconnected from 94.254.0.234 port 41490 [preauth]
Sep 28 02:47:40 nativespace-cdp sshd[7412]: Invalid user sysadmin from 193.70.1.27 port 52100
Sep 28 02:47:40 nativespace-cdp sshd[7412]: input_userauth_request: invalid user sysadmin [preauth]
Sep 28 02:47:40 nativespace-cdp sshd[7412]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 02:47:40 nativespace-cdp sshd[7412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.27
Sep 28 02:47:42 nativespace-cdp sshd[7412]: Failed password for invalid user sysadmin from 193.70.1.27 port 52100 ssh2
Sep 28 02:47:42 nativespace-cdp sshd[7412]: Received disconnect from 193.70.1.27 port 52100:11: Bye Bye [preauth]
Sep 28 02:47:42 nativespace-cdp sshd[7412]: Disconnected from 193.70.1.27 port 52100 [preauth]
Sep 28 02:47:50 nativespace-cdp sshd[7459]: Invalid user roland from 94.254.0.234 port 58756
Sep 28 02:47:50 nativespace-cdp sshd[7459]: input_userauth_request: invalid user roland [preauth]
Sep 28 02:47:50 nativespace-cdp sshd[7459]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 02:47:50 nativespace-cdp sshd[7459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.254.0.234
Sep 28 02:47:52 nativespace-cdp sshd[7459]: Failed password for invalid user roland from 94.254.0.234 port 58756 ssh2
Sep 28 02:51:33 nativespace-cdp sshd[8290]: Connection closed by 159.100.136.21 port 39406 [preauth]
Sep 28 02:56:33 nativespace-cdp sshd[9262]: Connection closed by 159.100.136.21 port 49426 [preauth]
Sep 28 03:01:33 nativespace-cdp sshd[10605]: Connection closed by 159.100.136.21 port 59196 [preauth]
Sep 28 03:06:34 nativespace-cdp sshd[12373]: Connection closed by 159.100.136.21 port 41114 [preauth]
Sep 28 03:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 03:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:14 nativespace-cdp sudo[13140]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 03:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:14 nativespace-cdp sudo[13143]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 03:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:14 nativespace-cdp sudo[13146]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 03:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:14 nativespace-cdp sudo[13157]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 03:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:16 nativespace-cdp sudo[13161]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 03:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:16 nativespace-cdp sudo[13171]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 03:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:16 nativespace-cdp sudo[13176]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 03:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:16 nativespace-cdp sudo[13179]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 03:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:16 nativespace-cdp sudo[13183]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 03:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:16 nativespace-cdp sudo[13186]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 03:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:16 nativespace-cdp sudo[13190]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 03:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:18 nativespace-cdp sudo[13201]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 03:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:18 nativespace-cdp sudo[13205]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cwsocial user-2=howardon user-3=pugwash user-4=paulmca1 user-5=reliable user-6=ninejimm user-7=cathski user-8=cambria1 user-9=courseme user-10=eugincou user-11=hirefootballgame user-12=firstre5 user-13=steakbridieme user-14=donnychicago user-15=ctedorgu user-16=philmcph user-17=lkpier user-18=foods user-19=leftie user-20=fortunaz user-21=health2045 user-22=nscdp user-23=tigerlet user-24=barbersh user-25=nomistakes user-26=hidden user-27=smrszyqg user-28=isleofwi user-29=nsceres user-30=fawcettd user-31=burydropin user-32=dhyana user-33=darkstar user-34=eatspam user-35=beauty user-36=sibtoncc user-37=asandcoc user-38=steve user-39=zebrapho user-40=bwppodcast user-41=nvihkvu user-42=havantho user-43=cath user-44=sketchy user-45=what user-46=tstardom user-47=oubpgvbx user-48=design
Sep 28 03:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=kategilpin user-50=dancinggardener user-51=stagingerris user-52=ladburyp user-53=boldover user-54=nove user-55=crrtipdl user-56=sosevalu user-57=bakery user-58=onlycont user-59=lucy user-60=attlebor user-61=romaldki user-62=branko user-63=hodgsonmail user-64=outdoorc user-65=ranxterc user-66=jennimil user-67=tomandle user-68=david user-69=careers user-70=nbhavers user-71=mcdermos user-72=chrisdal user-73=ptkxhsbt user-74=dickemery123 user-75=martsblo user-76=magichat user-77=hhdugcor user-78=lbhyisi user-79=atestord user-80=sarafoundation user-81=strathar user-82=lakesan1 user-83=brmrjxl user-84=megacards user-85=musorguk user-86=wilsonsw user-87=theblack user-88=hodgesonweb user-89=spectrum user-90=jarvisin user-91=leereyn1 user-92=stephani user-93=agproduc user-94=still user-95=lbscrmod user-96=maflemin user-97=vantagep user-98=athenare user-99=connect9 user-100=booff user-101=markward
Sep 28 03:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=foundation user-103=ulsukarm user-104=skyfirec user-105=alexadmin user-106=nativene user-107=askhform user-108=stuartge user-109=innovat1 user-110=oneoarco user-111=battlere user-112=vivienn1 user-113=firstre2 user-114=nstriton user-115=brighto1 user-116=bemadonn user-117=newstoda user-118=belle user-119=ggaaorgu user-120=bedfords user-121=fetch user-122=carsinyo user-123=hubmaster user-124=elecleis user-125=gilpin user-126=milloyco user-127=thqkgnbz user-128=connectedshoppin user-129=ianrayne user-130=accooper user-131=opaiscyx user-132=coursemc user-133=firstres user-134=ultbcrra user-135=seftvta user-136=jonhartl user-137=highlegh user-138=southlon user-139=firstred user-140=costestimatorco user-141=clarkass user-142=firstrel feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 28 03:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 03:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:18 nativespace-cdp sudo[13211]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:19 nativespace-cdp sudo[13217]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XI9rq805MJoLzT9c.~
Sep 28 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:19 nativespace-cdp sudo[13220]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XI9rq805MJoLzT9c.~'
Sep 28 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:19 nativespace-cdp sudo[13223]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XI9rq805MJoLzT9c.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:19 nativespace-cdp sudo[13228]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:19 nativespace-cdp sudo[13231]: pam_unix(sudo:session): session closed for user root
Sep 28 03:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 03:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 03:09:20 nativespace-cdp sudo[13251]: pam_unix(sudo:session): session closed for user root
Sep 28 03:11:33 nativespace-cdp sshd[13913]: Connection closed by 159.100.136.21 port 50614 [preauth]
Sep 28 03:16:36 nativespace-cdp sshd[15412]: Connection closed by 159.100.136.21 port 60190 [preauth]
Sep 28 03:21:36 nativespace-cdp sshd[16666]: Connection closed by 159.100.136.21 port 41416 [preauth]
Sep 28 03:26:33 nativespace-cdp sshd[17985]: Connection closed by 159.100.136.21 port 51360 [preauth]
Sep 28 03:31:33 nativespace-cdp sshd[19442]: Connection closed by 159.100.136.21 port 60950 [preauth]
Sep 28 03:36:33 nativespace-cdp sshd[20811]: Connection closed by 159.100.136.21 port 42254 [preauth]
Sep 28 03:41:33 nativespace-cdp sshd[22341]: Connection closed by 159.100.136.21 port 51612 [preauth]
Sep 28 03:46:33 nativespace-cdp sshd[23496]: Connection closed by 159.100.136.21 port 33352 [preauth]
Sep 28 03:51:33 nativespace-cdp sshd[24699]: Connection closed by 159.100.136.21 port 42968 [preauth]
Sep 28 03:56:33 nativespace-cdp sshd[25748]: Connection closed by 159.100.136.21 port 52616 [preauth]
Sep 28 04:01:33 nativespace-cdp sshd[27264]: Connection closed by 159.100.136.21 port 33930 [preauth]
Sep 28 04:06:36 nativespace-cdp sshd[28428]: Connection closed by 159.100.136.21 port 43726 [preauth]
Sep 28 04:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 04:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:24 nativespace-cdp sudo[28953]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 04:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:24 nativespace-cdp sudo[28956]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 04:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:26 nativespace-cdp sudo[28959]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 04:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:26 nativespace-cdp sudo[28973]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 04:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:31 nativespace-cdp sudo[28976]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:31 nativespace-cdp sudo[28995]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:31 nativespace-cdp sudo[28999]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:31 nativespace-cdp sudo[29002]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:31 nativespace-cdp sudo[29006]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:31 nativespace-cdp sudo[29009]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:31 nativespace-cdp sudo[29014]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 04:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:33 nativespace-cdp sudo[29025]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:34 nativespace-cdp sudo[29030]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ptkxhsbt user-2=dickemery123 user-3=martsblo user-4=magichat user-5=hhdugcor user-6=lbhyisi user-7=atestord user-8=sarafoundation user-9=strathar user-10=lakesan1 user-11=brmrjxl user-12=megacards user-13=musorguk user-14=wilsonsw user-15=theblack user-16=hodgesonweb user-17=spectrum user-18=jarvisin user-19=leereyn1 user-20=stephani user-21=agproduc user-22=still user-23=lbscrmod user-24=maflemin user-25=vantagep user-26=connect9 user-27=athenare user-28=markward user-29=foundation user-30=booff user-31=ulsukarm user-32=alexadmin user-33=skyfirec user-34=nativene user-35=askhform user-36=stuartge user-37=innovat1 user-38=oneoarco user-39=battlere user-40=vivienn1 user-41=firstre2 user-42=nstriton user-43=brighto1 user-44=bemadonn user-45=newstoda user-46=belle user-47=ggaaorgu user-48=bedfords
Sep 28 04:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=fetch user-50=carsinyo user-51=hubmaster user-52=elecleis user-53=gilpin user-54=milloyco user-55=thqkgnbz user-56=connectedshoppin user-57=ianrayne user-58=accooper user-59=opaiscyx user-60=coursemc user-61=firstres user-62=ultbcrra user-63=seftvta user-64=jonhartl user-65=highlegh user-66=southlon user-67=firstred user-68=costestimatorco user-69=firstrel user-70=clarkass user-71=cwsocial user-72=paulmca1 user-73=pugwash user-74=howardon user-75=ninejimm user-76=reliable user-77=cambria1 user-78=cathski user-79=courseme user-80=eugincou user-81=hirefootballgame user-82=firstre5 user-83=steakbridieme user-84=donnychicago user-85=ctedorgu user-86=philmcph user-87=lkpier user-88=foods user-89=leftie user-90=health2045 user-91=fortunaz user-92=nscdp user-93=tigerlet user-94=barbersh user-95=nomistakes user-96=hidden user-97=isleofwi user-98=smrszyqg user-99=nsceres user-100=fawcettd user-101=burydropin
Sep 28 04:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=darkstar user-104=eatspam user-105=beauty user-106=sibtoncc user-107=asandcoc user-108=steve user-109=zebrapho user-110=bwppodcast user-111=nvihkvu user-112=havantho user-113=cath user-114=sketchy user-115=what user-116=oubpgvbx user-117=tstardom user-118=design user-119=kategilpin user-120=stagingerris user-121=dancinggardener user-122=ladburyp user-123=boldover user-124=nove user-125=crrtipdl user-126=sosevalu user-127=bakery user-128=onlycont user-129=lucy user-130=attlebor user-131=romaldki user-132=branko user-133=outdoorc user-134=hodgsonmail user-135=ranxterc user-136=jennimil user-137=tomandle user-138=david user-139=nbhavers user-140=careers user-141=mcdermos user-142=chrisdal feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 04:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:35 nativespace-cdp sudo[29035]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:36 nativespace-cdp sudo[29041]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d0WdOJyCW5fwuiZq.~
Sep 28 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:36 nativespace-cdp sudo[29044]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d0WdOJyCW5fwuiZq.~'
Sep 28 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:36 nativespace-cdp sudo[29047]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d0WdOJyCW5fwuiZq.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:36 nativespace-cdp sudo[29051]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:36 nativespace-cdp sudo[29054]: pam_unix(sudo:session): session closed for user root
Sep 28 04:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 04:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:09:37 nativespace-cdp sudo[29077]: pam_unix(sudo:session): session closed for user root
Sep 28 04:11:33 nativespace-cdp sshd[29571]: Connection closed by 159.100.136.21 port 52950 [preauth]
Sep 28 04:16:33 nativespace-cdp sshd[30920]: Connection closed by 159.100.136.21 port 33978 [preauth]
Sep 28 04:21:36 nativespace-cdp sshd[32138]: Connection closed by 159.100.136.21 port 43408 [preauth]
Sep 28 04:26:33 nativespace-cdp sshd[723]: Connection closed by 159.100.136.21 port 53350 [preauth]
Sep 28 04:31:34 nativespace-cdp sshd[2046]: Connection closed by 159.100.136.21 port 34294 [preauth]
Sep 28 04:36:32 nativespace-cdp sshd[3274]: Connection closed by 159.100.136.21 port 43778 [preauth]
Sep 28 04:41:36 nativespace-cdp sshd[5404]: Connection closed by 159.100.136.21 port 53296 [preauth]
Sep 28 04:46:35 nativespace-cdp sshd[7496]: Connection closed by 159.100.136.21 port 34894 [preauth]
Sep 28 04:46:45 nativespace-cdp sshd[7514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.23.158  user=root
Sep 28 04:46:45 nativespace-cdp sshd[7514]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 04:46:46 nativespace-cdp sshd[7514]: Failed password for root from 61.19.23.158 port 37794 ssh2
Sep 28 04:46:47 nativespace-cdp sshd[7514]: Received disconnect from 61.19.23.158 port 37794:11: Bye Bye [preauth]
Sep 28 04:46:47 nativespace-cdp sshd[7514]: Disconnected from 61.19.23.158 port 37794 [preauth]
Sep 28 04:51:33 nativespace-cdp sshd[8586]: Connection closed by 159.100.136.21 port 44548 [preauth]
Sep 28 04:52:35 nativespace-cdp sshd[8878]: Connection closed by 61.19.23.158 port 35086 [preauth]
Sep 28 04:53:17 nativespace-cdp sshd[9007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.23.158  user=root
Sep 28 04:53:17 nativespace-cdp sshd[9007]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 04:53:19 nativespace-cdp sshd[9007]: Failed password for root from 61.19.23.158 port 47498 ssh2
Sep 28 04:53:19 nativespace-cdp sshd[9007]: Received disconnect from 61.19.23.158 port 47498:11: Bye Bye [preauth]
Sep 28 04:53:19 nativespace-cdp sshd[9007]: Disconnected from 61.19.23.158 port 47498 [preauth]
Sep 28 04:54:03 nativespace-cdp sshd[9131]: Invalid user daniel from 61.19.23.158 port 59906
Sep 28 04:54:03 nativespace-cdp sshd[9131]: input_userauth_request: invalid user daniel [preauth]
Sep 28 04:54:03 nativespace-cdp sshd[9131]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 04:54:03 nativespace-cdp sshd[9131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.23.158
Sep 28 04:54:05 nativespace-cdp sshd[9131]: Failed password for invalid user daniel from 61.19.23.158 port 59906 ssh2
Sep 28 04:54:07 nativespace-cdp sshd[9131]: Received disconnect from 61.19.23.158 port 59906:11: Bye Bye [preauth]
Sep 28 04:54:07 nativespace-cdp sshd[9131]: Disconnected from 61.19.23.158 port 59906 [preauth]
Sep 28 04:56:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 04:56:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:19 nativespace-cdp sudo[9641]: pam_unix(sudo:session): session closed for user root
Sep 28 04:56:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 04:56:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:19 nativespace-cdp sudo[9653]: pam_unix(sudo:session): session closed for user root
Sep 28 04:56:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 04:56:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:24 nativespace-cdp sudo[9665]: pam_unix(sudo:session): session closed for user root
Sep 28 04:56:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ultbcrra user-2=jonhartl user-3=seftvta user-4=firstres user-5=coursemc user-6=opaiscyx user-7=clarkass user-8=firstrel user-9=costestimatorco user-10=firstred user-11=highlegh user-12=southlon user-13=milloyco user-14=gilpin user-15=elecleis user-16=hubmaster user-17=fetch user-18=carsinyo user-19=accooper user-20=ianrayne user-21=connectedshoppin user-22=thqkgnbz user-23=nstriton user-24=brighto1 user-25=vivienn1 user-26=firstre2 user-27=oneoarco user-28=battlere user-29=bedfords user-30=newstoda user-31=belle user-32=ggaaorgu user-33=bemadonn user-34=skyfirec user-35=alexadmin user-36=innovat1 user-37=stuartge user-38=askhform user-39=nativene user-40=booff user-41=foundation user-42=markward user-43=vantagep user-44=athenare user-45=connect9 user-46=lbscrmod user-47=maflemin user-48=ulsukarm
Sep 28 04:56:24 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jarvisin user-50=spectrum user-51=hodgesonweb user-52=theblack user-53=agproduc user-54=still user-55=stephani user-56=leereyn1 user-57=lakesan1 user-58=brmrjxl user-59=strathar user-60=atestord user-61=sarafoundation user-62=wilsonsw user-63=megacards user-64=musorguk user-65=martsblo user-66=dickemery123 user-67=ptkxhsbt user-68=hhdugcor user-69=lbhyisi user-70=magichat user-71=tomandle user-72=jennimil user-73=chrisdal user-74=mcdermos user-75=david user-76=careers user-77=nbhavers user-78=lucy user-79=attlebor user-80=onlycont user-81=hodgsonmail user-82=outdoorc user-83=ranxterc user-84=branko user-85=romaldki user-86=nove user-87=boldover user-88=bakery user-89=crrtipdl user-90=sosevalu user-91=tstardom user-92=oubpgvbx user-93=what user-94=havantho user-95=cath user-96=sketchy user-97=nvihkvu user-98=stagingerris user-99=dancinggardener user-100=ladburyp user-101=kategilpin user-102=design
Sep 28 04:56:24 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=sibtoncc user-104=asandcoc user-105=bwppodcast user-106=zebrapho user-107=steve user-108=fawcettd user-109=burydropin user-110=nsceres user-111=beauty user-112=darkstar user-113=eatspam user-114=dhyana user-115=nscdp user-116=foods user-117=leftie user-118=health2045 user-119=fortunaz user-120=lkpier user-121=firstre5 user-122=steakbridieme user-123=donnychicago user-124=ctedorgu user-125=philmcph user-126=isleofwi user-127=smrszyqg user-128=nomistakes user-129=hidden user-130=tigerlet user-131=barbersh user-132=cathski user-133=cambria1 user-134=ninejimm user-135=reliable user-136=cwsocial user-137=paulmca1 user-138=pugwash user-139=howardon user-140=hirefootballgame user-141=eugincou user-142=courseme feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 04:56:24 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 04:56:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:25 nativespace-cdp sudo[9670]: pam_unix(sudo:session): session closed for user root
Sep 28 04:56:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 28 04:56:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:26 nativespace-cdp sudo[9676]: pam_unix(sudo:session): session closed for user root
Sep 28 04:56:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 28 04:56:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:27 nativespace-cdp sudo[9682]: pam_unix(sudo:session): session closed for user root
Sep 28 04:56:33 nativespace-cdp sshd[9709]: Connection closed by 159.100.136.21 port 53922 [preauth]
Sep 28 04:56:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 28 04:56:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 04:56:53 nativespace-cdp sudo[9790]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 04:56:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 28 04:56:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:54 nativespace-cdp sudo[9797]: pam_unix(sudo:session): session closed for user root
Sep 28 04:56:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 28 04:56:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:55 nativespace-cdp sudo[9806]: pam_unix(sudo:session): session closed for user root
Sep 28 04:56:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 28 04:56:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:59 nativespace-cdp sudo[9811]: pam_unix(sudo:session): session closed for user root
Sep 28 04:56:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 28 04:56:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:56:59 nativespace-cdp sudo[9831]: pam_unix(sudo:session): session closed for user root
Sep 28 04:57:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 28 04:57:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:57:02 nativespace-cdp sudo[9866]: pam_unix(sudo:session): session closed for user root
Sep 28 04:57:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 28 04:57:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:57:07 nativespace-cdp sudo[9944]: pam_unix(sudo:session): session closed for user root
Sep 28 04:57:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 28 04:57:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:57:08 nativespace-cdp sudo[9975]: pam_unix(sudo:session): session closed for user root
Sep 28 04:57:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 28 04:57:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:57:08 nativespace-cdp sudo[9981]: pam_unix(sudo:session): session closed for user root
Sep 28 04:57:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 28 04:57:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:57:16 nativespace-cdp sudo[10066]: pam_unix(sudo:session): session closed for user root
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 28 04:57:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 04:57:19 nativespace-cdp sudo[10131]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:57:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 04:57:19 nativespace-cdp sudo[10137]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:57:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 04:57:19 nativespace-cdp sudo[10144]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 28 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:57:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 04:57:19 nativespace-cdp sudo[10150]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 28 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 04:57:32 nativespace-cdp sudo[10266]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 04:57:32 nativespace-cdp sudo[10272]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 04:57:32 nativespace-cdp sudo[10278]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 28 04:57:32 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 04:57:32 nativespace-cdp sudo[10284]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 04:57:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 28 04:57:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:57:35 nativespace-cdp sudo[10327]: pam_unix(sudo:session): session closed for user root
Sep 28 04:57:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 28 04:57:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:57:35 nativespace-cdp sudo[10333]: pam_unix(sudo:session): session closed for user root
Sep 28 04:58:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 28 04:58:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 04:58:07 nativespace-cdp sudo[10538]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 04:58:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 28 04:58:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:58:08 nativespace-cdp sudo[10545]: pam_unix(sudo:session): session closed for user root
Sep 28 04:58:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 28 04:58:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:58:08 nativespace-cdp sudo[10549]: pam_unix(sudo:session): session closed for user root
Sep 28 04:58:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 28 04:58:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:58:09 nativespace-cdp sudo[10554]: pam_unix(sudo:session): session closed for user root
Sep 28 04:58:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 28 04:58:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:58:09 nativespace-cdp sudo[10562]: pam_unix(sudo:session): session closed for user root
Sep 28 04:58:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 28 04:58:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:58:13 nativespace-cdp sudo[10589]: pam_unix(sudo:session): session closed for user root
Sep 28 04:58:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 28 04:58:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:58:13 nativespace-cdp sudo[10606]: pam_unix(sudo:session): session closed for user root
Sep 28 04:58:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 28 04:58:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:58:21 nativespace-cdp sudo[10690]: pam_unix(sudo:session): session closed for user root
Sep 28 04:58:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 28 04:58:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 04:58:24 nativespace-cdp sudo[10752]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 04:58:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 28 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 28 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 28 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:58:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 04:58:25 nativespace-cdp sudo[10758]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 04:58:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 28 04:58:25 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 28 04:58:25 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 28 04:58:25 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:58:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 04:58:45 nativespace-cdp sudo[10766]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 04:58:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 28 04:58:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 04:58:56 nativespace-cdp sudo[11255]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 04:58:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 28 04:58:56 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 28 04:58:56 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 28 04:58:56 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:58:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 04:58:56 nativespace-cdp sudo[11262]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 04:58:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 28 04:58:56 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 28 04:58:56 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 28 04:58:56 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:58:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 04:58:57 nativespace-cdp sudo[11268]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 04:58:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 28 04:58:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:59:00 nativespace-cdp sudo[11308]: pam_unix(sudo:session): session closed for user root
Sep 28 04:59:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 28 04:59:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:59:00 nativespace-cdp sudo[11312]: pam_unix(sudo:session): session closed for user root
Sep 28 04:59:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 28 04:59:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 04:59:34 nativespace-cdp sudo[11484]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 04:59:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 28 04:59:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:59:35 nativespace-cdp sudo[11490]: pam_unix(sudo:session): session closed for user root
Sep 28 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 28 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:59:35 nativespace-cdp sudo[11496]: pam_unix(sudo:session): session closed for user root
Sep 28 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 28 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:59:35 nativespace-cdp sudo[11500]: pam_unix(sudo:session): session closed for user root
Sep 28 04:59:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 28 04:59:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:59:36 nativespace-cdp sudo[11515]: pam_unix(sudo:session): session closed for user root
Sep 28 04:59:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 28 04:59:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:59:37 nativespace-cdp sudo[11520]: pam_unix(sudo:session): session closed for user root
Sep 28 04:59:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 28 04:59:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 04:59:43 nativespace-cdp sudo[11596]: pam_unix(sudo:session): session closed for user root
Sep 28 04:59:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 28 04:59:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 04:59:46 nativespace-cdp sudo[11653]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 04:59:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 28 04:59:46 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 28 04:59:46 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 28 04:59:46 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:59:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 04:59:46 nativespace-cdp sudo[11660]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 04:59:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 28 04:59:46 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 28 04:59:46 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 28 04:59:46 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 04:59:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 05:00:03 nativespace-cdp sudo[11668]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 05:00:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 28 05:00:03 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 28 05:00:03 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 28 05:00:03 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 05:00:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 05:00:05 nativespace-cdp sudo[11837]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 28 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 05:00:12 nativespace-cdp sudo[11983]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 28 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 28 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 28 05:00:12 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 05:00:13 nativespace-cdp sudo[11990]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 05:00:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 28 05:00:13 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 28 05:00:13 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 28 05:00:13 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 05:00:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 05:00:13 nativespace-cdp sudo[11997]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 05:00:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 28 05:00:13 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 28 05:00:13 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 28 05:00:13 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 05:00:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 05:00:13 nativespace-cdp sudo[12003]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 05:00:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 28 05:00:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:15 nativespace-cdp sudo[12087]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 28 05:00:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:16 nativespace-cdp sudo[12093]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 28 05:00:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:17 nativespace-cdp sudo[12111]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 28 05:00:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:17 nativespace-cdp sudo[12117]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 28 05:00:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 28 05:00:17 nativespace-cdp sudo[12127]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 28 05:00:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 28 05:00:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:18 nativespace-cdp sudo[12133]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 28 05:00:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:18 nativespace-cdp sudo[12138]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 28 05:00:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:18 nativespace-cdp sudo[12142]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 28 05:00:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 05:00:29 nativespace-cdp sudo[12210]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 05:00:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 28 05:00:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:30 nativespace-cdp sudo[12216]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 28 05:00:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:30 nativespace-cdp sudo[12221]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 28 05:00:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:32 nativespace-cdp sudo[12236]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 28 05:00:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:00:41 nativespace-cdp sudo[12320]: pam_unix(sudo:session): session closed for user root
Sep 28 05:00:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 28 05:00:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 05:00:45 nativespace-cdp sudo[12384]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 05:00:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 28 05:00:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 28 05:00:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 28 05:00:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 05:00:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 05:00:46 nativespace-cdp sudo[12390]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 05:00:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 28 05:00:46 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 28 05:00:46 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 28 05:00:46 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 05:00:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 05:01:00 nativespace-cdp sudo[12400]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 05:01:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 28 05:01:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 05:01:06 nativespace-cdp sudo[12558]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 05:01:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 28 05:01:06 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 28 05:01:06 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 28 05:01:06 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 05:01:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 05:01:06 nativespace-cdp sudo[12564]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 05:01:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 28 05:01:06 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 28 05:01:06 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 28 05:01:06 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 28 05:01:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 05:01:06 nativespace-cdp sudo[12570]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 05:01:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 28 05:01:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:01:09 nativespace-cdp sudo[12605]: pam_unix(sudo:session): session closed for user root
Sep 28 05:01:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 28 05:01:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:01:11 nativespace-cdp sudo[12609]: pam_unix(sudo:session): session closed for user root
Sep 28 05:01:34 nativespace-cdp sshd[12713]: Connection closed by 159.100.136.21 port 35060 [preauth]
Sep 28 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 28 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 28 05:01:50 nativespace-cdp sudo[12757]: pam_unix(sudo:session): session closed for user fortunaz
Sep 28 05:01:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 28 05:01:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:01:51 nativespace-cdp sudo[12763]: pam_unix(sudo:session): session closed for user root
Sep 28 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 28 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:01:52 nativespace-cdp sudo[12770]: pam_unix(sudo:session): session closed for user root
Sep 28 05:01:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 28 05:01:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:01:52 nativespace-cdp sudo[12775]: pam_unix(sudo:session): session closed for user root
Sep 28 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 28 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:01:54 nativespace-cdp sudo[12791]: pam_unix(sudo:session): session closed for user root
Sep 28 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 28 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:01:55 nativespace-cdp sudo[12797]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 28 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:01 nativespace-cdp sudo[12868]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=ultbcrra WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "Check & Log Email" on ONE | OAR (https://oneoar.co.uk). Installed version: 1.0.6. Available version: 2.0.2.<br/><br/>' installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 28 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:12 nativespace-cdp sudo[13161]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 28 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:21 nativespace-cdp sudo[13291]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13295]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13299]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13303]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13306]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13309]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13312]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13315]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13318]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13321]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13324]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13327]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13330]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13333]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:22 nativespace-cdp sudo[13336]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13339]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13342]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13345]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13348]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13351]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13354]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13357]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13361]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13365]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13369]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13372]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13375]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13378]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13381]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13384]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13387]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13390]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13393]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13396]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13399]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13402]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13405]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13408]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:23 nativespace-cdp sudo[13411]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13414]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13417]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13420]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13423]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13426]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13429]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13432]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13436]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13440]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13443]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13446]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13449]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13452]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13455]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13458]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13461]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13464]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13467]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13470]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13473]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13476]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13479]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:24 nativespace-cdp sudo[13482]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13486]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13489]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13492]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13495]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13498]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13501]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13504]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13507]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13512]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13515]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13518]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13521]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13525]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13528]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13531]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13534]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13538]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13541]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13544]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13547]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13550]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13553]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:25 nativespace-cdp sudo[13556]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13559]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13563]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13566]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13569]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13572]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13575]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13578]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13582]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13586]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13589]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13592]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13595]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13598]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13601]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13604]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13608]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13611]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13614]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13617]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13620]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13623]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13626]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13629]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 28 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:26 nativespace-cdp sudo[13632]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13635]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13638]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13641]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13644]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13647]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13650]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13653]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13656]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13659]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13662]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13667]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13670]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13673]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13676]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13679]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13682]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13685]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13688]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13691]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13694]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13697]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13700]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13703]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13706]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13709]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13712]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13715]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13718]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13721]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:27 nativespace-cdp sudo[13724]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13727]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13730]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13733]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13736]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13739]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13742]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13746]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13749]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13752]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13755]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13759]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13762]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13765]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13768]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13771]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13774]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13777]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13780]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13783]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13786]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13789]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13792]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13795]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13798]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13801]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13804]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13807]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13810]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:28 nativespace-cdp sudo[13813]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13816]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13819]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13822]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13825]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13828]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13831]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13834]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13837]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13840]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13844]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13847]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13850]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13853]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13856]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13859]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13862]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13865]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13868]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13871]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13874]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13877]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13880]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13883]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13886]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13889]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13892]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13895]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:29 nativespace-cdp sudo[13898]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13901]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13904]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13907]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13910]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13913]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13916]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13919]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13922]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13925]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13928]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13932]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13935]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13938]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13941]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13944]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13947]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13950]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13953]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13956]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13959]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13962]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13965]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13968]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13971]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13974]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13977]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13980]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 28 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:30 nativespace-cdp sudo[13983]: pam_unix(sudo:session): session closed for user root
Sep 28 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 28 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:02:31 nativespace-cdp sudo[13986]: pam_unix(sudo:session): session closed for user root
Sep 28 05:06:35 nativespace-cdp sshd[14933]: Connection closed by 159.100.136.21 port 44530 [preauth]
Sep 28 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:21 nativespace-cdp sudo[15511]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:21 nativespace-cdp sudo[15514]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:21 nativespace-cdp sudo[15517]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:21 nativespace-cdp sudo[15523]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:24 nativespace-cdp sudo[15526]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 05:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:24 nativespace-cdp sudo[15535]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 05:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:24 nativespace-cdp sudo[15538]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 05:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:24 nativespace-cdp sudo[15541]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 05:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:24 nativespace-cdp sudo[15544]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 05:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:24 nativespace-cdp sudo[15547]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 05:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:24 nativespace-cdp sudo[15550]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 05:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:27 nativespace-cdp sudo[15567]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 05:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:28 nativespace-cdp sudo[15572]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=still user-2=agproduc user-3=leereyn1 user-4=stephani user-5=jarvisin user-6=hodgesonweb user-7=theblack user-8=spectrum user-9=ulsukarm user-10=booff user-11=markward user-12=foundation user-13=maflemin user-14=lbscrmod user-15=athenare user-16=connect9 user-17=vantagep user-18=lbhyisi user-19=hhdugcor user-20=magichat user-21=martsblo user-22=ptkxhsbt user-23=dickemery123 user-24=wilsonsw user-25=musorguk user-26=megacards user-27=brmrjxl user-28=lakesan1 user-29=sarafoundation user-30=atestord user-31=strathar user-32=ianrayne user-33=accooper user-34=thqkgnbz user-35=connectedshoppin user-36=elecleis user-37=gilpin user-38=milloyco user-39=carsinyo user-40=fetch user-41=hubmaster user-42=costestimatorco user-43=firstrel user-44=clarkass user-45=southlon user-46=highlegh user-47=firstred
Sep 28 05:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=firstres user-49=jonhartl user-50=seftvta user-51=ultbcrra user-52=coursemc user-53=opaiscyx user-54=stuartge user-55=askhform user-56=innovat1 user-57=nativene user-58=skyfirec user-59=alexadmin user-60=bedfords user-61=bemadonn user-62=belle user-63=ggaaorgu user-64=newstoda user-65=brighto1 user-66=nstriton user-67=battlere user-68=oneoarco user-69=firstre2 user-70=vivienn1 user-71=eatspam user-72=darkstar user-73=beauty user-74=dhyana user-75=burydropin user-76=fawcettd user-77=nsceres user-78=zebrapho user-79=bwppodcast user-80=steve user-81=asandcoc user-82=sibtoncc user-83=hirefootballgame user-84=courseme user-85=eugincou user-86=reliable user-87=ninejimm user-88=cathski user-89=cambria1 user-90=pugwash user-91=paulmca1 user-92=howardon user-93=cwsocial user-94=isleofwi user-95=smrszyqg user-96=barbersh user-97=tigerlet user-98=hidden user-99=nomistakes user-100=health2045 user-101=fortunaz
Sep 28 05:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=foods user-103=leftie user-104=nscdp user-105=ctedorgu user-106=philmcph user-107=donnychicago user-108=firstre5 user-109=steakbridieme user-110=lkpier user-111=branko user-112=outdoorc user-113=hodgsonmail user-114=ranxterc user-115=romaldki user-116=attlebor user-117=lucy user-118=onlycont user-119=mcdermos user-120=chrisdal user-121=careers user-122=nbhavers user-123=david user-124=tomandle user-125=jennimil user-126=kategilpin user-127=ladburyp user-128=dancinggardener user-129=stagingerris user-130=design user-131=what user-132=oubpgvbx user-133=tstardom user-134=nvihkvu user-135=cath user-136=sketchy user-137=havantho user-138=sosevalu user-139=crrtipdl user-140=bakery user-141=nove user-142=boldover feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 05:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 05:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:28 nativespace-cdp sudo[15578]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:29 nativespace-cdp sudo[15588]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uC7AIMxrte3vzanI.~
Sep 28 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:29 nativespace-cdp sudo[15591]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uC7AIMxrte3vzanI.~'
Sep 28 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:29 nativespace-cdp sudo[15595]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-uC7AIMxrte3vzanI.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:29 nativespace-cdp sudo[15600]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:29 nativespace-cdp sudo[15604]: pam_unix(sudo:session): session closed for user root
Sep 28 05:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 05:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 05:09:31 nativespace-cdp sudo[15622]: pam_unix(sudo:session): session closed for user root
Sep 28 05:11:36 nativespace-cdp sshd[16196]: Connection closed by 159.100.136.21 port 53326 [preauth]
Sep 28 05:16:33 nativespace-cdp sshd[17573]: Connection closed by 159.100.136.21 port 34792 [preauth]
Sep 28 05:21:35 nativespace-cdp sshd[18867]: Connection closed by 159.100.136.21 port 44224 [preauth]
Sep 28 05:26:33 nativespace-cdp sshd[19796]: Connection closed by 159.100.136.21 port 53858 [preauth]
Sep 28 05:31:34 nativespace-cdp sshd[21186]: Connection closed by 159.100.136.21 port 34700 [preauth]
Sep 28 05:35:13 nativespace-cdp su: pam_unix(su:session): session opened for user firstre5 by (uid=0)
Sep 28 05:35:14 nativespace-cdp su[22044]: pam_unix(su:session): session closed for user firstre5
Sep 28 05:36:33 nativespace-cdp sshd[22300]: Connection closed by 159.100.136.21 port 44504 [preauth]
Sep 28 05:41:33 nativespace-cdp sshd[23648]: Connection closed by 159.100.136.21 port 53938 [preauth]
Sep 28 05:46:33 nativespace-cdp sshd[24970]: Connection closed by 159.100.136.21 port 35636 [preauth]
Sep 28 05:51:33 nativespace-cdp sshd[26044]: Connection closed by 159.100.136.21 port 45214 [preauth]
Sep 28 05:54:01 nativespace-cdp sshd[26487]: Invalid user superman from 189.195.113.27 port 41446
Sep 28 05:54:01 nativespace-cdp sshd[26487]: input_userauth_request: invalid user superman [preauth]
Sep 28 05:54:02 nativespace-cdp sshd[26487]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 05:54:02 nativespace-cdp sshd[26487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.113.27
Sep 28 05:54:04 nativespace-cdp sshd[26487]: Failed password for invalid user superman from 189.195.113.27 port 41446 ssh2
Sep 28 05:54:04 nativespace-cdp sshd[26487]: Received disconnect from 189.195.113.27 port 41446:11: Bye Bye [preauth]
Sep 28 05:54:04 nativespace-cdp sshd[26487]: Disconnected from 189.195.113.27 port 41446 [preauth]
Sep 28 05:54:25 nativespace-cdp sshd[26561]: Invalid user support from 135.125.233.57 port 57850
Sep 28 05:54:25 nativespace-cdp sshd[26561]: input_userauth_request: invalid user support [preauth]
Sep 28 05:54:25 nativespace-cdp sshd[26561]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 05:54:25 nativespace-cdp sshd[26561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.233.57
Sep 28 05:54:27 nativespace-cdp sshd[26561]: Failed password for invalid user support from 135.125.233.57 port 57850 ssh2
Sep 28 05:54:27 nativespace-cdp sshd[26561]: Received disconnect from 135.125.233.57 port 57850:11: Bye Bye [preauth]
Sep 28 05:54:27 nativespace-cdp sshd[26561]: Disconnected from 135.125.233.57 port 57850 [preauth]
Sep 28 05:55:40 nativespace-cdp sshd[26852]: Invalid user nexus from 135.125.233.57 port 59184
Sep 28 05:55:40 nativespace-cdp sshd[26852]: input_userauth_request: invalid user nexus [preauth]
Sep 28 05:55:40 nativespace-cdp sshd[26852]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 05:55:40 nativespace-cdp sshd[26852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.233.57
Sep 28 05:55:42 nativespace-cdp sshd[26856]: Invalid user ubuntu from 189.195.113.27 port 34064
Sep 28 05:55:42 nativespace-cdp sshd[26856]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 05:55:42 nativespace-cdp sshd[26856]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 05:55:42 nativespace-cdp sshd[26856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.113.27
Sep 28 05:55:42 nativespace-cdp sshd[26852]: Failed password for invalid user nexus from 135.125.233.57 port 59184 ssh2
Sep 28 05:55:42 nativespace-cdp sshd[26852]: Received disconnect from 135.125.233.57 port 59184:11: Bye Bye [preauth]
Sep 28 05:55:42 nativespace-cdp sshd[26852]: Disconnected from 135.125.233.57 port 59184 [preauth]
Sep 28 05:55:44 nativespace-cdp sshd[26856]: Failed password for invalid user ubuntu from 189.195.113.27 port 34064 ssh2
Sep 28 05:55:47 nativespace-cdp sshd[26856]: Received disconnect from 189.195.113.27 port 34064:11: Bye Bye [preauth]
Sep 28 05:55:47 nativespace-cdp sshd[26856]: Disconnected from 189.195.113.27 port 34064 [preauth]
Sep 28 05:56:17 nativespace-cdp sshd[26942]: Invalid user user from 135.125.233.57 port 35610
Sep 28 05:56:17 nativespace-cdp sshd[26942]: input_userauth_request: invalid user user [preauth]
Sep 28 05:56:17 nativespace-cdp sshd[26942]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 05:56:17 nativespace-cdp sshd[26942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.233.57
Sep 28 05:56:20 nativespace-cdp sshd[26942]: Failed password for invalid user user from 135.125.233.57 port 35610 ssh2
Sep 28 05:56:20 nativespace-cdp sshd[26942]: Received disconnect from 135.125.233.57 port 35610:11: Bye Bye [preauth]
Sep 28 05:56:20 nativespace-cdp sshd[26942]: Disconnected from 135.125.233.57 port 35610 [preauth]
Sep 28 05:56:35 nativespace-cdp sshd[26997]: Connection closed by 159.100.136.21 port 54982 [preauth]
Sep 28 05:57:10 nativespace-cdp sshd[27081]: Invalid user ubuntu from 189.195.113.27 port 59786
Sep 28 05:57:10 nativespace-cdp sshd[27081]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 05:57:10 nativespace-cdp sshd[27081]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 05:57:10 nativespace-cdp sshd[27081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.113.27
Sep 28 05:57:12 nativespace-cdp sshd[27081]: Failed password for invalid user ubuntu from 189.195.113.27 port 59786 ssh2
Sep 28 05:57:12 nativespace-cdp sshd[27081]: Received disconnect from 189.195.113.27 port 59786:11: Bye Bye [preauth]
Sep 28 05:57:12 nativespace-cdp sshd[27081]: Disconnected from 189.195.113.27 port 59786 [preauth]
Sep 28 06:01:33 nativespace-cdp sshd[28266]: Connection closed by 159.100.136.21 port 36190 [preauth]
Sep 28 06:06:33 nativespace-cdp sshd[29586]: Connection closed by 159.100.136.21 port 45900 [preauth]
Sep 28 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:37 nativespace-cdp sudo[30242]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:37 nativespace-cdp sudo[30245]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:39 nativespace-cdp sudo[30248]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 06:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:39 nativespace-cdp sudo[30263]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 06:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:43 nativespace-cdp sudo[30267]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 06:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:43 nativespace-cdp sudo[30290]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 06:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:43 nativespace-cdp sudo[30294]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 06:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:43 nativespace-cdp sudo[30298]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 06:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:43 nativespace-cdp sudo[30301]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 06:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:44 nativespace-cdp sudo[30304]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 06:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:44 nativespace-cdp sudo[30307]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 06:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:46 nativespace-cdp sudo[30318]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 06:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:47 nativespace-cdp sudo[30324]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=kategilpin user-2=dancinggardener user-3=stagingerris user-4=ladburyp user-5=design user-6=what user-7=tstardom user-8=oubpgvbx user-9=nvihkvu user-10=havantho user-11=sketchy user-12=cath user-13=crrtipdl user-14=sosevalu user-15=bakery user-16=nove user-17=boldover user-18=branko user-19=hodgsonmail user-20=outdoorc user-21=ranxterc user-22=romaldki user-23=lucy user-24=attlebor user-25=onlycont user-26=mcdermos user-27=chrisdal user-28=david user-29=nbhavers user-30=careers user-31=tomandle user-32=jennimil user-33=hirefootballgame user-34=courseme user-35=eugincou user-36=ninejimm user-37=reliable user-38=cathski user-39=cambria1 user-40=cwsocial user-41=pugwash user-42=paulmca1 user-43=howardon user-44=isleofwi user-45=smrszyqg user-46=barbersh user-47=tigerlet user-48=nomistakes
Sep 28 06:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=hidden user-50=leftie user-51=foods user-52=health2045 user-53=fortunaz user-54=nscdp user-55=steakbridieme user-56=firstre5 user-57=donnychicago user-58=philmcph user-59=ctedorgu user-60=lkpier user-61=darkstar user-62=eatspam user-63=beauty user-64=dhyana user-65=fawcettd user-66=burydropin user-67=nsceres user-68=zebrapho user-69=bwppodcast user-70=steve user-71=asandcoc user-72=sibtoncc user-73=stuartge user-74=askhform user-75=innovat1 user-76=nativene user-77=alexadmin user-78=skyfirec user-79=bedfords user-80=bemadonn user-81=newstoda user-82=ggaaorgu user-83=belle user-84=nstriton user-85=brighto1 user-86=oneoarco user-87=battlere user-88=vivienn1 user-89=firstre2 user-90=ianrayne user-91=accooper user-92=thqkgnbz user-93=connectedshoppin user-94=elecleis user-95=milloyco user-96=gilpin user-97=fetch user-98=carsinyo user-99=hubmaster user-100=costestimatorco user-101=firstrel user-102=clarkass
Sep 28 06:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=highlegh user-104=southlon user-105=firstred user-106=firstres user-107=ultbcrra user-108=seftvta user-109=jonhartl user-110=coursemc user-111=opaiscyx user-112=hhdugcor user-113=lbhyisi user-114=magichat user-115=martsblo user-116=ptkxhsbt user-117=dickemery123 user-118=wilsonsw user-119=megacards user-120=musorguk user-121=lakesan1 user-122=brmrjxl user-123=atestord user-124=sarafoundation user-125=strathar user-126=agproduc user-127=still user-128=leereyn1 user-129=stephani user-130=jarvisin user-131=hodgesonweb user-132=theblack user-133=spectrum user-134=ulsukarm user-135=foundation user-136=booff user-137=markward user-138=lbscrmod user-139=maflemin user-140=vantagep user-141=connect9 user-142=athenare feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 06:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 06:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:48 nativespace-cdp sudo[30330]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 06:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:49 nativespace-cdp sudo[30338]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PkYjipb4dBAwT8qM.~
Sep 28 06:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:49 nativespace-cdp sudo[30341]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PkYjipb4dBAwT8qM.~'
Sep 28 06:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:49 nativespace-cdp sudo[30344]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PkYjipb4dBAwT8qM.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 06:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:49 nativespace-cdp sudo[30348]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 06:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:49 nativespace-cdp sudo[30351]: pam_unix(sudo:session): session closed for user root
Sep 28 06:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 06:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:09:57 nativespace-cdp sudo[30382]: pam_unix(sudo:session): session closed for user root
Sep 28 06:11:33 nativespace-cdp sshd[30803]: Connection closed by 159.100.136.21 port 55288 [preauth]
Sep 28 06:16:37 nativespace-cdp sshd[32520]: Connection closed by 159.100.136.21 port 35904 [preauth]
Sep 28 06:19:43 nativespace-cdp sshd[802]: Invalid user bkp from 157.10.253.251 port 33854
Sep 28 06:19:43 nativespace-cdp sshd[802]: input_userauth_request: invalid user bkp [preauth]
Sep 28 06:19:44 nativespace-cdp sshd[802]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 06:19:44 nativespace-cdp sshd[802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.10.253.251
Sep 28 06:19:46 nativespace-cdp sshd[802]: Failed password for invalid user bkp from 157.10.253.251 port 33854 ssh2
Sep 28 06:19:46 nativespace-cdp sshd[802]: Received disconnect from 157.10.253.251 port 33854:11: Bye Bye [preauth]
Sep 28 06:19:46 nativespace-cdp sshd[802]: Disconnected from 157.10.253.251 port 33854 [preauth]
Sep 28 06:21:19 nativespace-cdp sshd[1275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.65.144.243  user=root
Sep 28 06:21:19 nativespace-cdp sshd[1275]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 06:21:21 nativespace-cdp sshd[1275]: Failed password for root from 194.65.144.243 port 60289 ssh2
Sep 28 06:21:21 nativespace-cdp sshd[1275]: Received disconnect from 194.65.144.243 port 60289:11: Bye Bye [preauth]
Sep 28 06:21:21 nativespace-cdp sshd[1275]: Disconnected from 194.65.144.243 port 60289 [preauth]
Sep 28 06:21:33 nativespace-cdp sshd[1306]: Connection closed by 159.100.136.21 port 45340 [preauth]
Sep 28 06:22:34 nativespace-cdp sshd[1464]: Invalid user basesystem from 61.80.179.118 port 33049
Sep 28 06:22:34 nativespace-cdp sshd[1464]: input_userauth_request: invalid user basesystem [preauth]
Sep 28 06:22:34 nativespace-cdp sshd[1464]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 06:22:34 nativespace-cdp sshd[1464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.80.179.118
Sep 28 06:22:37 nativespace-cdp sshd[1464]: Failed password for invalid user basesystem from 61.80.179.118 port 33049 ssh2
Sep 28 06:22:37 nativespace-cdp sshd[1464]: Received disconnect from 61.80.179.118 port 33049:11: Bye Bye [preauth]
Sep 28 06:22:37 nativespace-cdp sshd[1464]: Disconnected from 61.80.179.118 port 33049 [preauth]
Sep 28 06:23:06 nativespace-cdp sshd[1641]: Invalid user nisec from 200.13.244.227 port 59282
Sep 28 06:23:06 nativespace-cdp sshd[1641]: input_userauth_request: invalid user nisec [preauth]
Sep 28 06:23:06 nativespace-cdp sshd[1641]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 06:23:06 nativespace-cdp sshd[1641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.244.227
Sep 28 06:23:08 nativespace-cdp sshd[1641]: Failed password for invalid user nisec from 200.13.244.227 port 59282 ssh2
Sep 28 06:23:09 nativespace-cdp sshd[1641]: Received disconnect from 200.13.244.227 port 59282:11: Bye Bye [preauth]
Sep 28 06:23:09 nativespace-cdp sshd[1641]: Disconnected from 200.13.244.227 port 59282 [preauth]
Sep 28 06:23:17 nativespace-cdp sshd[1669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.65.144.243  user=root
Sep 28 06:23:17 nativespace-cdp sshd[1669]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 06:23:19 nativespace-cdp sshd[1669]: Failed password for root from 194.65.144.243 port 53878 ssh2
Sep 28 06:23:19 nativespace-cdp sshd[1669]: Received disconnect from 194.65.144.243 port 53878:11: Bye Bye [preauth]
Sep 28 06:23:19 nativespace-cdp sshd[1669]: Disconnected from 194.65.144.243 port 53878 [preauth]
Sep 28 06:23:26 nativespace-cdp sshd[1679]: Connection closed by 157.10.253.251 port 58762 [preauth]
Sep 28 06:23:32 nativespace-cdp sshd[1701]: Invalid user admin from 61.80.179.118 port 40068
Sep 28 06:23:32 nativespace-cdp sshd[1701]: input_userauth_request: invalid user admin [preauth]
Sep 28 06:23:32 nativespace-cdp sshd[1701]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 06:23:32 nativespace-cdp sshd[1701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.80.179.118
Sep 28 06:23:34 nativespace-cdp sshd[1701]: Failed password for invalid user admin from 61.80.179.118 port 40068 ssh2
Sep 28 06:23:35 nativespace-cdp sshd[1701]: Received disconnect from 61.80.179.118 port 40068:11: Bye Bye [preauth]
Sep 28 06:23:35 nativespace-cdp sshd[1701]: Disconnected from 61.80.179.118 port 40068 [preauth]
Sep 28 06:23:56 nativespace-cdp sshd[1770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.65.144.243  user=root
Sep 28 06:23:56 nativespace-cdp sshd[1770]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 06:23:58 nativespace-cdp sshd[1770]: Failed password for root from 194.65.144.243 port 57471 ssh2
Sep 28 06:23:58 nativespace-cdp sshd[1770]: Received disconnect from 194.65.144.243 port 57471:11: Bye Bye [preauth]
Sep 28 06:23:58 nativespace-cdp sshd[1770]: Disconnected from 194.65.144.243 port 57471 [preauth]
Sep 28 06:24:20 nativespace-cdp sshd[1861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.80.179.118  user=root
Sep 28 06:24:20 nativespace-cdp sshd[1861]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 06:24:22 nativespace-cdp sshd[1861]: Failed password for root from 61.80.179.118 port 46385 ssh2
Sep 28 06:24:25 nativespace-cdp sshd[1861]: Received disconnect from 61.80.179.118 port 46385:11: Bye Bye [preauth]
Sep 28 06:24:25 nativespace-cdp sshd[1861]: Disconnected from 61.80.179.118 port 46385 [preauth]
Sep 28 06:25:16 nativespace-cdp sshd[2177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.10.253.251  user=root
Sep 28 06:25:16 nativespace-cdp sshd[2177]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 06:25:18 nativespace-cdp sshd[2177]: Failed password for root from 157.10.253.251 port 38898 ssh2
Sep 28 06:25:19 nativespace-cdp sshd[2177]: Received disconnect from 157.10.253.251 port 38898:11: Bye Bye [preauth]
Sep 28 06:25:19 nativespace-cdp sshd[2177]: Disconnected from 157.10.253.251 port 38898 [preauth]
Sep 28 06:26:08 nativespace-cdp sshd[2323]: Invalid user nisec from 157.10.253.251 port 43732
Sep 28 06:26:08 nativespace-cdp sshd[2323]: input_userauth_request: invalid user nisec [preauth]
Sep 28 06:26:08 nativespace-cdp sshd[2323]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 06:26:08 nativespace-cdp sshd[2323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.10.253.251
Sep 28 06:26:10 nativespace-cdp sshd[2323]: Failed password for invalid user nisec from 157.10.253.251 port 43732 ssh2
Sep 28 06:26:10 nativespace-cdp sshd[2323]: Received disconnect from 157.10.253.251 port 43732:11: Bye Bye [preauth]
Sep 28 06:26:10 nativespace-cdp sshd[2323]: Disconnected from 157.10.253.251 port 43732 [preauth]
Sep 28 06:26:33 nativespace-cdp sshd[2397]: Connection closed by 159.100.136.21 port 55198 [preauth]
Sep 28 06:29:00 nativespace-cdp sshd[3084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.244.227  user=root
Sep 28 06:29:00 nativespace-cdp sshd[3084]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 06:29:01 nativespace-cdp sshd[3084]: Failed password for root from 200.13.244.227 port 48690 ssh2
Sep 28 06:29:02 nativespace-cdp sshd[3084]: Received disconnect from 200.13.244.227 port 48690:11: Bye Bye [preauth]
Sep 28 06:29:02 nativespace-cdp sshd[3084]: Disconnected from 200.13.244.227 port 48690 [preauth]
Sep 28 06:30:39 nativespace-cdp sshd[3578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.244.227  user=root
Sep 28 06:30:39 nativespace-cdp sshd[3578]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 06:30:41 nativespace-cdp sshd[3578]: Failed password for root from 200.13.244.227 port 50552 ssh2
Sep 28 06:31:35 nativespace-cdp sshd[3811]: Connection closed by 159.100.136.21 port 36718 [preauth]
Sep 28 06:36:33 nativespace-cdp sshd[5016]: Connection closed by 159.100.136.21 port 46490 [preauth]
Sep 28 06:41:33 nativespace-cdp sshd[6089]: Connection closed by 159.100.136.21 port 56254 [preauth]
Sep 28 06:46:35 nativespace-cdp sshd[9263]: Connection closed by 159.100.136.21 port 37508 [preauth]
Sep 28 06:51:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 06:51:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 06:51:08 nativespace-cdp sudo[11928]: pam_unix(sudo:session): session closed for user root
Sep 28 06:51:33 nativespace-cdp sshd[12001]: Connection closed by 159.100.136.21 port 47282 [preauth]
Sep 28 06:56:33 nativespace-cdp sshd[13048]: Connection closed by 159.100.136.21 port 57152 [preauth]
Sep 28 07:01:35 nativespace-cdp sshd[14446]: Connection closed by 159.100.136.21 port 38338 [preauth]
Sep 28 07:06:33 nativespace-cdp sshd[15524]: Connection closed by 159.100.136.21 port 48346 [preauth]
Sep 28 07:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 07:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:18 nativespace-cdp sudo[16083]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 07:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:18 nativespace-cdp sudo[16087]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 07:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:19 nativespace-cdp sudo[16091]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:19 nativespace-cdp sudo[16098]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:23 nativespace-cdp sudo[16102]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:23 nativespace-cdp sudo[16115]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:23 nativespace-cdp sudo[16118]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:23 nativespace-cdp sudo[16121]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:23 nativespace-cdp sudo[16124]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:23 nativespace-cdp sudo[16127]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:23 nativespace-cdp sudo[16131]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 07:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:25 nativespace-cdp sudo[16140]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 07:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:26 nativespace-cdp sudo[16144]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sarafoundation user-2=atestord user-3=strathar user-4=brmrjxl user-5=lakesan1 user-6=musorguk user-7=megacards user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=lbhyisi user-14=hhdugcor user-15=maflemin user-16=lbscrmod user-17=connect9 user-18=athenare user-19=vantagep user-20=foundation user-21=booff user-22=markward user-23=ulsukarm user-24=hodgesonweb user-25=theblack user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=still user-31=agproduc user-32=battlere user-33=oneoarco user-34=firstre2 user-35=vivienn1 user-36=brighto1 user-37=nstriton user-38=bemadonn user-39=belle user-40=ggaaorgu user-41=newstoda user-42=bedfords user-43=alexadmin user-44=skyfirec user-45=nativene user-46=askhform user-47=stuartge user-48=innovat1
Sep 28 07:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=opaiscyx user-50=coursemc user-51=firstres user-52=jonhartl user-53=seftvta user-54=ultbcrra user-55=southlon user-56=highlegh user-57=firstred user-58=costestimatorco user-59=firstrel user-60=clarkass user-61=carsinyo user-62=fetch user-63=hubmaster user-64=elecleis user-65=gilpin user-66=milloyco user-67=thqkgnbz user-68=connectedshoppin user-69=ianrayne user-70=accooper user-71=ctedorgu user-72=philmcph user-73=steakbridieme user-74=firstre5 user-75=donnychicago user-76=lkpier user-77=health2045 user-78=fortunaz user-79=leftie user-80=foods user-81=nscdp user-82=tigerlet user-83=barbersh user-84=hidden user-85=nomistakes user-86=smrszyqg user-87=isleofwi user-88=paulmca1 user-89=pugwash user-90=howardon user-91=cwsocial user-92=reliable user-93=ninejimm user-94=cambria1 user-95=cathski user-96=courseme user-97=eugincou user-98=hirefootballgame user-99=asandcoc user-100=sibtoncc user-101=steve
Sep 28 07:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=bwppodcast user-104=nsceres user-105=burydropin user-106=fawcettd user-107=dhyana user-108=eatspam user-109=darkstar user-110=beauty user-111=boldover user-112=nove user-113=sosevalu user-114=crrtipdl user-115=bakery user-116=nvihkvu user-117=cath user-118=sketchy user-119=havantho user-120=what user-121=tstardom user-122=oubpgvbx user-123=design user-124=kategilpin user-125=ladburyp user-126=dancinggardener user-127=stagingerris user-128=jennimil user-129=tomandle user-130=careers user-131=nbhavers user-132=david user-133=mcdermos user-134=chrisdal user-135=onlycont user-136=attlebor user-137=lucy user-138=romaldki user-139=branko user-140=hodgsonmail user-141=outdoorc user-142=ranxterc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 07:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 07:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:28 nativespace-cdp sudo[16150]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 07:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:28 nativespace-cdp sudo[16162]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-aZmlT87SXKy0W8g5.~
Sep 28 07:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:28 nativespace-cdp sudo[16165]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-aZmlT87SXKy0W8g5.~'
Sep 28 07:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:28 nativespace-cdp sudo[16168]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-aZmlT87SXKy0W8g5.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 07:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:28 nativespace-cdp sudo[16172]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 07:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:28 nativespace-cdp sudo[16176]: pam_unix(sudo:session): session closed for user root
Sep 28 07:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 07:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 07:09:35 nativespace-cdp sudo[16207]: pam_unix(sudo:session): session closed for user root
Sep 28 07:11:33 nativespace-cdp sshd[16648]: Connection closed by 159.100.136.21 port 57902 [preauth]
Sep 28 07:16:33 nativespace-cdp sshd[17967]: Connection closed by 159.100.136.21 port 39744 [preauth]
Sep 28 07:21:34 nativespace-cdp sshd[19111]: Connection closed by 159.100.136.21 port 49244 [preauth]
Sep 28 07:31:33 nativespace-cdp sshd[21428]: Connection closed by 159.100.136.21 port 39368 [preauth]
Sep 28 07:36:33 nativespace-cdp sshd[22410]: Connection closed by 159.100.136.21 port 49284 [preauth]
Sep 28 07:41:35 nativespace-cdp sshd[23512]: Connection closed by 159.100.136.21 port 59010 [preauth]
Sep 28 07:46:33 nativespace-cdp sshd[24883]: Connection closed by 159.100.136.21 port 40572 [preauth]
Sep 28 07:51:33 nativespace-cdp sshd[25895]: Connection closed by 159.100.136.21 port 50126 [preauth]
Sep 28 07:56:37 nativespace-cdp sshd[26933]: Connection closed by 159.100.136.21 port 60258 [preauth]
Sep 28 08:01:33 nativespace-cdp sshd[28454]: Connection closed by 159.100.136.21 port 41746 [preauth]
Sep 28 08:06:34 nativespace-cdp sshd[29694]: Connection closed by 159.100.136.21 port 51824 [preauth]
Sep 28 08:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 08:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:20 nativespace-cdp sudo[30213]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 08:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:20 nativespace-cdp sudo[30217]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 08:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:22 nativespace-cdp sudo[30220]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:22 nativespace-cdp sudo[30228]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:24 nativespace-cdp sudo[30231]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 08:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:24 nativespace-cdp sudo[30240]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 08:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:24 nativespace-cdp sudo[30243]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 08:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:25 nativespace-cdp sudo[30246]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 08:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:25 nativespace-cdp sudo[30249]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 08:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:25 nativespace-cdp sudo[30253]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 08:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:25 nativespace-cdp sudo[30256]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 08:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:26 nativespace-cdp sudo[30267]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 08:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:27 nativespace-cdp sudo[30272]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nscdp user-2=leftie user-3=foods user-4=fortunaz user-5=health2045 user-6=lkpier user-7=firstre5 user-8=steakbridieme user-9=donnychicago user-10=philmcph user-11=ctedorgu user-12=smrszyqg user-13=isleofwi user-14=nomistakes user-15=hidden user-16=barbersh user-17=tigerlet user-18=cambria1 user-19=cathski user-20=reliable user-21=ninejimm user-22=cwsocial user-23=pugwash user-24=howardon user-25=paulmca1 user-26=hirefootballgame user-27=eugincou user-28=courseme user-29=sibtoncc user-30=asandcoc user-31=bwppodcast user-32=zebrapho user-33=steve user-34=fawcettd user-35=burydropin user-36=nsceres user-37=beauty user-38=darkstar user-39=eatspam user-40=dhyana user-41=nove user-42=boldover user-43=bakery user-44=crrtipdl user-45=sosevalu user-46=tstardom user-47=oubpgvbx user-48=what
Sep 28 08:09:27 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=havantho user-50=sketchy user-51=cath user-52=nvihkvu user-53=stagingerris user-54=dancinggardener user-55=ladburyp user-56=kategilpin user-57=design user-58=tomandle user-59=jennimil user-60=chrisdal user-61=mcdermos user-62=david user-63=nbhavers user-64=careers user-65=lucy user-66=attlebor user-67=onlycont user-68=hodgsonmail user-69=outdoorc user-70=ranxterc user-71=branko user-72=romaldki user-73=brmrjxl user-74=lakesan1 user-75=strathar user-76=atestord user-77=sarafoundation user-78=wilsonsw user-79=megacards user-80=musorguk user-81=martsblo user-82=dickemery123 user-83=ptkxhsbt user-84=hhdugcor user-85=lbhyisi user-86=magichat user-87=booff user-88=foundation user-89=markward user-90=vantagep user-91=connect9 user-92=athenare user-93=lbscrmod user-94=maflemin user-95=ulsukarm user-96=jarvisin user-97=spectrum user-98=hodgesonweb user-99=theblack user-100=agproduc user-101=still user-102=stephani
Sep 28 08:09:27 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=leereyn1 user-104=nstriton user-105=brighto1 user-106=vivienn1 user-107=firstre2 user-108=oneoarco user-109=battlere user-110=bedfords user-111=newstoda user-112=ggaaorgu user-113=belle user-114=bemadonn user-115=skyfirec user-116=alexadmin user-117=innovat1 user-118=askhform user-119=stuartge user-120=nativene user-121=ultbcrra user-122=seftvta user-123=jonhartl user-124=firstres user-125=opaiscyx user-126=coursemc user-127=firstrel user-128=clarkass user-129=costestimatorco user-130=firstred user-131=highlegh user-132=southlon user-133=milloyco user-134=gilpin user-135=elecleis user-136=hubmaster user-137=fetch user-138=carsinyo user-139=accooper user-140=ianrayne user-141=connectedshoppin user-142=thqkgnbz feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 08:09:27 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 08:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:28 nativespace-cdp sudo[30277]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 08:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:29 nativespace-cdp sudo[30287]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WKavPWpXJ5ZCCfv7.~
Sep 28 08:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:29 nativespace-cdp sudo[30291]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WKavPWpXJ5ZCCfv7.~'
Sep 28 08:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:29 nativespace-cdp sudo[30294]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WKavPWpXJ5ZCCfv7.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 08:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:29 nativespace-cdp sudo[30298]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 08:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:29 nativespace-cdp sudo[30301]: pam_unix(sudo:session): session closed for user root
Sep 28 08:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 08:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 08:09:31 nativespace-cdp sudo[30319]: pam_unix(sudo:session): session closed for user root
Sep 28 08:11:33 nativespace-cdp sshd[30791]: Connection closed by 159.100.136.21 port 33150 [preauth]
Sep 28 08:16:33 nativespace-cdp sshd[31999]: Connection closed by 159.100.136.21 port 42916 [preauth]
Sep 28 08:21:33 nativespace-cdp sshd[755]: Connection closed by 159.100.136.21 port 52386 [preauth]
Sep 28 08:26:33 nativespace-cdp sshd[1807]: Connection closed by 159.100.136.21 port 33994 [preauth]
Sep 28 08:28:35 nativespace-cdp sshd[2092]: Invalid user ubuntu from 91.92.199.36 port 59644
Sep 28 08:28:35 nativespace-cdp sshd[2092]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 08:28:35 nativespace-cdp sshd[2092]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:28:35 nativespace-cdp sshd[2092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.199.36
Sep 28 08:28:37 nativespace-cdp sshd[2092]: Failed password for invalid user ubuntu from 91.92.199.36 port 59644 ssh2
Sep 28 08:28:37 nativespace-cdp sshd[2092]: Received disconnect from 91.92.199.36 port 59644:11: Bye Bye [preauth]
Sep 28 08:28:37 nativespace-cdp sshd[2092]: Disconnected from 91.92.199.36 port 59644 [preauth]
Sep 28 08:28:37 nativespace-cdp sshd[2100]: Invalid user odoo from 34.92.176.182 port 35304
Sep 28 08:28:37 nativespace-cdp sshd[2100]: input_userauth_request: invalid user odoo [preauth]
Sep 28 08:28:37 nativespace-cdp sshd[2100]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:28:37 nativespace-cdp sshd[2100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.176.182
Sep 28 08:28:39 nativespace-cdp sshd[2100]: Failed password for invalid user odoo from 34.92.176.182 port 35304 ssh2
Sep 28 08:28:39 nativespace-cdp sshd[2100]: Received disconnect from 34.92.176.182 port 35304:11: Bye Bye [preauth]
Sep 28 08:28:39 nativespace-cdp sshd[2100]: Disconnected from 34.92.176.182 port 35304 [preauth]
Sep 28 08:31:10 nativespace-cdp sshd[3104]: Invalid user ubuntu from 123.23.118.38 port 35425
Sep 28 08:31:10 nativespace-cdp sshd[3104]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 08:31:10 nativespace-cdp sshd[3104]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:31:10 nativespace-cdp sshd[3104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.23.118.38
Sep 28 08:31:12 nativespace-cdp sshd[3104]: Failed password for invalid user ubuntu from 123.23.118.38 port 35425 ssh2
Sep 28 08:31:12 nativespace-cdp sshd[3104]: Received disconnect from 123.23.118.38 port 35425:11: Bye Bye [preauth]
Sep 28 08:31:12 nativespace-cdp sshd[3104]: Disconnected from 123.23.118.38 port 35425 [preauth]
Sep 28 08:31:35 nativespace-cdp sshd[3193]: Connection closed by 159.100.136.21 port 43364 [preauth]
Sep 28 08:32:34 nativespace-cdp sshd[3350]: Invalid user acer from 61.220.69.14 port 34856
Sep 28 08:32:34 nativespace-cdp sshd[3350]: input_userauth_request: invalid user acer [preauth]
Sep 28 08:32:34 nativespace-cdp sshd[3350]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:32:34 nativespace-cdp sshd[3350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.220.69.14
Sep 28 08:32:37 nativespace-cdp sshd[3350]: Failed password for invalid user acer from 61.220.69.14 port 34856 ssh2
Sep 28 08:32:39 nativespace-cdp sshd[3350]: Received disconnect from 61.220.69.14 port 34856:11: Bye Bye [preauth]
Sep 28 08:32:39 nativespace-cdp sshd[3350]: Disconnected from 61.220.69.14 port 34856 [preauth]
Sep 28 08:34:13 nativespace-cdp sshd[3741]: Invalid user deploy from 34.92.176.182 port 32822
Sep 28 08:34:13 nativespace-cdp sshd[3741]: input_userauth_request: invalid user deploy [preauth]
Sep 28 08:34:13 nativespace-cdp sshd[3741]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:34:13 nativespace-cdp sshd[3741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.176.182
Sep 28 08:34:15 nativespace-cdp sshd[3741]: Failed password for invalid user deploy from 34.92.176.182 port 32822 ssh2
Sep 28 08:34:15 nativespace-cdp sshd[3741]: Received disconnect from 34.92.176.182 port 32822:11: Bye Bye [preauth]
Sep 28 08:34:15 nativespace-cdp sshd[3741]: Disconnected from 34.92.176.182 port 32822 [preauth]
Sep 28 08:34:21 nativespace-cdp sshd[3771]: Invalid user ubuntu from 91.92.199.36 port 60914
Sep 28 08:34:21 nativespace-cdp sshd[3771]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 08:34:21 nativespace-cdp sshd[3771]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:34:21 nativespace-cdp sshd[3771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.199.36
Sep 28 08:34:23 nativespace-cdp sshd[3771]: Failed password for invalid user ubuntu from 91.92.199.36 port 60914 ssh2
Sep 28 08:34:25 nativespace-cdp sshd[3771]: Received disconnect from 91.92.199.36 port 60914:11: Bye Bye [preauth]
Sep 28 08:34:25 nativespace-cdp sshd[3771]: Disconnected from 91.92.199.36 port 60914 [preauth]
Sep 28 08:34:37 nativespace-cdp sshd[3799]: Invalid user user from 123.23.118.38 port 52280
Sep 28 08:34:37 nativespace-cdp sshd[3799]: input_userauth_request: invalid user user [preauth]
Sep 28 08:34:37 nativespace-cdp sshd[3799]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:34:37 nativespace-cdp sshd[3799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.23.118.38
Sep 28 08:34:39 nativespace-cdp sshd[3799]: Failed password for invalid user user from 123.23.118.38 port 52280 ssh2
Sep 28 08:34:39 nativespace-cdp sshd[3799]: Received disconnect from 123.23.118.38 port 52280:11: Bye Bye [preauth]
Sep 28 08:34:39 nativespace-cdp sshd[3799]: Disconnected from 123.23.118.38 port 52280 [preauth]
Sep 28 08:34:46 nativespace-cdp sshd[3824]: Connection closed by 61.220.69.14 port 36428 [preauth]
Sep 28 08:34:57 nativespace-cdp sshd[3859]: Invalid user nexus from 34.92.176.182 port 45538
Sep 28 08:34:57 nativespace-cdp sshd[3859]: input_userauth_request: invalid user nexus [preauth]
Sep 28 08:34:57 nativespace-cdp sshd[3859]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:34:57 nativespace-cdp sshd[3859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.176.182
Sep 28 08:34:59 nativespace-cdp sshd[3859]: Failed password for invalid user nexus from 34.92.176.182 port 45538 ssh2
Sep 28 08:34:59 nativespace-cdp sshd[3859]: Received disconnect from 34.92.176.182 port 45538:11: Bye Bye [preauth]
Sep 28 08:34:59 nativespace-cdp sshd[3859]: Disconnected from 34.92.176.182 port 45538 [preauth]
Sep 28 08:35:01 nativespace-cdp sshd[3899]: Invalid user test from 91.92.199.36 port 44834
Sep 28 08:35:01 nativespace-cdp sshd[3899]: input_userauth_request: invalid user test [preauth]
Sep 28 08:35:01 nativespace-cdp sshd[3899]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:35:01 nativespace-cdp sshd[3899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.199.36
Sep 28 08:35:04 nativespace-cdp sshd[3899]: Failed password for invalid user test from 91.92.199.36 port 44834 ssh2
Sep 28 08:35:05 nativespace-cdp sshd[3899]: Received disconnect from 91.92.199.36 port 44834:11: Bye Bye [preauth]
Sep 28 08:35:05 nativespace-cdp sshd[3899]: Disconnected from 91.92.199.36 port 44834 [preauth]
Sep 28 08:35:38 nativespace-cdp sshd[4102]: Connection closed by 123.23.118.38 port 58515 [preauth]
Sep 28 08:35:39 nativespace-cdp sshd[4091]: Connection closed by 61.220.69.14 port 56378 [preauth]
Sep 28 08:36:11 nativespace-cdp sshd[4271]: Invalid user ubuntu from 61.220.69.14 port 44168
Sep 28 08:36:11 nativespace-cdp sshd[4271]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 08:36:11 nativespace-cdp sshd[4271]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:36:11 nativespace-cdp sshd[4271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.220.69.14
Sep 28 08:36:14 nativespace-cdp sshd[4271]: Failed password for invalid user ubuntu from 61.220.69.14 port 44168 ssh2
Sep 28 08:36:14 nativespace-cdp sshd[4271]: Received disconnect from 61.220.69.14 port 44168:11: Bye Bye [preauth]
Sep 28 08:36:14 nativespace-cdp sshd[4271]: Disconnected from 61.220.69.14 port 44168 [preauth]
Sep 28 08:36:22 nativespace-cdp sshd[4307]: Invalid user ubuntu from 123.23.118.38 port 36517
Sep 28 08:36:22 nativespace-cdp sshd[4307]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 08:36:22 nativespace-cdp sshd[4307]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:36:22 nativespace-cdp sshd[4307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.23.118.38
Sep 28 08:36:24 nativespace-cdp sshd[4307]: Failed password for invalid user ubuntu from 123.23.118.38 port 36517 ssh2
Sep 28 08:36:33 nativespace-cdp sshd[4362]: Connection closed by 159.100.136.21 port 53416 [preauth]
Sep 28 08:36:56 nativespace-cdp sshd[4417]: Invalid user svn from 61.220.69.14 port 33978
Sep 28 08:36:56 nativespace-cdp sshd[4417]: input_userauth_request: invalid user svn [preauth]
Sep 28 08:36:56 nativespace-cdp sshd[4417]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 08:36:56 nativespace-cdp sshd[4417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.220.69.14
Sep 28 08:36:58 nativespace-cdp sshd[4417]: Failed password for invalid user svn from 61.220.69.14 port 33978 ssh2
Sep 28 08:36:59 nativespace-cdp sshd[4417]: Received disconnect from 61.220.69.14 port 33978:11: Bye Bye [preauth]
Sep 28 08:36:59 nativespace-cdp sshd[4417]: Disconnected from 61.220.69.14 port 33978 [preauth]
Sep 28 08:41:33 nativespace-cdp sshd[5493]: Connection closed by 159.100.136.21 port 34712 [preauth]
Sep 28 08:46:33 nativespace-cdp sshd[6900]: Connection closed by 159.100.136.21 port 44576 [preauth]
Sep 28 08:51:33 nativespace-cdp sshd[8034]: Connection closed by 159.100.136.21 port 54060 [preauth]
Sep 28 08:56:33 nativespace-cdp sshd[9118]: Connection closed by 159.100.136.21 port 35136 [preauth]
Sep 28 09:01:34 nativespace-cdp sshd[10681]: Connection closed by 159.100.136.21 port 43964 [preauth]
Sep 28 09:06:34 nativespace-cdp sshd[11883]: Connection closed by 159.100.136.21 port 53910 [preauth]
Sep 28 09:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 09:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:29 nativespace-cdp sudo[12456]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 09:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:29 nativespace-cdp sudo[12460]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 09:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:31 nativespace-cdp sudo[12464]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:31 nativespace-cdp sudo[12475]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:35 nativespace-cdp sudo[12478]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:35 nativespace-cdp sudo[12489]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:35 nativespace-cdp sudo[12492]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:35 nativespace-cdp sudo[12495]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:35 nativespace-cdp sudo[12498]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:35 nativespace-cdp sudo[12501]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:35 nativespace-cdp sudo[12504]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 09:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:42 nativespace-cdp sudo[12526]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 09:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:44 nativespace-cdp sudo[12533]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=onlycont user-2=lucy user-3=attlebor user-4=romaldki user-5=branko user-6=hodgsonmail user-7=outdoorc user-8=ranxterc user-9=jennimil user-10=tomandle user-11=david user-12=careers user-13=nbhavers user-14=mcdermos user-15=chrisdal user-16=nvihkvu user-17=havantho user-18=sketchy user-19=cath user-20=what user-21=oubpgvbx user-22=tstardom user-23=design user-24=kategilpin user-25=stagingerris user-26=dancinggardener user-27=ladburyp user-28=boldover user-29=nove user-30=crrtipdl user-31=sosevalu user-32=bakery user-33=nsceres user-34=fawcettd user-35=burydropin user-36=dhyana user-37=darkstar user-38=eatspam user-39=beauty user-40=asandcoc user-41=sibtoncc user-42=steve user-43=zebrapho user-44=bwppodcast user-45=cwsocial user-46=paulmca1 user-47=howardon user-48=pugwash user-49=ninejimm
Sep 28 09:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=reliable user-51=cathski user-52=cambria1 user-53=courseme user-54=eugincou user-55=hirefootballgame user-56=steakbridieme user-57=firstre5 user-58=donnychicago user-59=philmcph user-60=ctedorgu user-61=lkpier user-62=foods user-63=leftie user-64=health2045 user-65=fortunaz user-66=nscdp user-67=barbersh user-68=tigerlet user-69=nomistakes user-70=hidden user-71=smrszyqg user-72=isleofwi user-73=fetch user-74=carsinyo user-75=hubmaster user-76=elecleis user-77=gilpin user-78=milloyco user-79=thqkgnbz user-80=connectedshoppin user-81=ianrayne user-82=accooper user-83=coursemc user-84=opaiscyx user-85=firstres user-86=ultbcrra user-87=seftvta user-88=jonhartl user-89=highlegh user-90=southlon user-91=firstred user-92=costestimatorco user-93=clarkass user-94=firstrel user-95=skyfirec user-96=alexadmin user-97=nativene user-98=stuartge user-99=askhform user-100=innovat1 user-101=oneoarco user-102=battlere
Sep 28 09:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=vivienn1 user-104=firstre2 user-105=nstriton user-106=brighto1 user-107=bemadonn user-108=newstoda user-109=ggaaorgu user-110=belle user-111=bedfords user-112=hodgesonweb user-113=theblack user-114=spectrum user-115=jarvisin user-116=leereyn1 user-117=stephani user-118=agproduc user-119=still user-120=lbscrmod user-121=maflemin user-122=vantagep user-123=connect9 user-124=athenare user-125=booff user-126=foundation user-127=markward user-128=ulsukarm user-129=ptkxhsbt user-130=dickemery123 user-131=martsblo user-132=magichat user-133=hhdugcor user-134=lbhyisi user-135=atestord user-136=sarafoundation user-137=strathar user-138=brmrjxl user-139=lakesan1 user-140=megacards user-141=musorguk user-142=wilsonsw feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 09:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:45 nativespace-cdp sudo[12541]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 09:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:45 nativespace-cdp sudo[12552]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4FHCEKndKlrgIadB.~
Sep 28 09:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:45 nativespace-cdp sudo[12556]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4FHCEKndKlrgIadB.~'
Sep 28 09:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:45 nativespace-cdp sudo[12559]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4FHCEKndKlrgIadB.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 09:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:46 nativespace-cdp sudo[12564]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 09:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:46 nativespace-cdp sudo[12568]: pam_unix(sudo:session): session closed for user root
Sep 28 09:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 09:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 09:09:53 nativespace-cdp sudo[12611]: pam_unix(sudo:session): session closed for user root
Sep 28 09:11:33 nativespace-cdp sshd[13032]: Connection closed by 159.100.136.21 port 34488 [preauth]
Sep 28 09:16:33 nativespace-cdp sshd[14385]: Connection closed by 159.100.136.21 port 43744 [preauth]
Sep 28 09:21:35 nativespace-cdp sshd[15441]: Connection closed by 159.100.136.21 port 53078 [preauth]
Sep 28 09:26:33 nativespace-cdp sshd[16389]: Connection closed by 159.100.136.21 port 34560 [preauth]
Sep 28 09:31:33 nativespace-cdp sshd[17726]: Connection closed by 159.100.136.21 port 43400 [preauth]
Sep 28 09:36:33 nativespace-cdp sshd[19176]: Connection closed by 159.100.136.21 port 52238 [preauth]
Sep 28 09:41:34 nativespace-cdp sshd[20315]: Connection closed by 159.100.136.21 port 33214 [preauth]
Sep 28 09:46:33 nativespace-cdp sshd[21818]: Connection closed by 159.100.136.21 port 41572 [preauth]
Sep 28 09:51:36 nativespace-cdp sshd[23157]: Connection closed by 159.100.136.21 port 50988 [preauth]
Sep 28 09:56:33 nativespace-cdp sshd[24122]: Connection closed by 159.100.136.21 port 60542 [preauth]
Sep 28 10:01:33 nativespace-cdp sshd[25580]: Connection closed by 159.100.136.21 port 40778 [preauth]
Sep 28 10:06:33 nativespace-cdp sshd[26579]: Connection closed by 159.100.136.21 port 50440 [preauth]
Sep 28 10:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 10:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:31 nativespace-cdp sudo[27167]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 10:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:31 nativespace-cdp sudo[27171]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 10:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:33 nativespace-cdp sudo[27175]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 10:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:33 nativespace-cdp sudo[27182]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 10:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:37 nativespace-cdp sudo[27185]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 10:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:37 nativespace-cdp sudo[27207]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 10:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:37 nativespace-cdp sudo[27210]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 10:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:37 nativespace-cdp sudo[27213]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 10:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:37 nativespace-cdp sudo[27217]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 10:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:37 nativespace-cdp sudo[27220]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 10:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:37 nativespace-cdp sudo[27223]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 10:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:39 nativespace-cdp sudo[27238]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 10:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:40 nativespace-cdp sudo[27243]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=atestord user-2=sarafoundation user-3=strathar user-4=lakesan1 user-5=brmrjxl user-6=megacards user-7=musorguk user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=hhdugcor user-14=lbhyisi user-15=lbscrmod user-16=maflemin user-17=vantagep user-18=athenare user-19=connect9 user-20=booff user-21=foundation user-22=markward user-23=ulsukarm user-24=theblack user-25=hodgesonweb user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=agproduc user-31=still user-32=oneoarco user-33=battlere user-34=vivienn1 user-35=firstre2 user-36=nstriton user-37=brighto1 user-38=bemadonn user-39=newstoda user-40=ggaaorgu user-41=belle user-42=bedfords user-43=skyfirec user-44=alexadmin user-45=nativene user-46=stuartge user-47=askhform user-48=innovat1
Sep 28 10:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=coursemc user-50=opaiscyx user-51=firstres user-52=ultbcrra user-53=seftvta user-54=jonhartl user-55=highlegh user-56=southlon user-57=firstred user-58=costestimatorco user-59=clarkass user-60=firstrel user-61=fetch user-62=carsinyo user-63=hubmaster user-64=elecleis user-65=milloyco user-66=gilpin user-67=thqkgnbz user-68=connectedshoppin user-69=ianrayne user-70=accooper user-71=firstre5 user-72=steakbridieme user-73=donnychicago user-74=philmcph user-75=ctedorgu user-76=lkpier user-77=foods user-78=leftie user-79=health2045 user-80=fortunaz user-81=nscdp user-82=tigerlet user-83=barbersh user-84=nomistakes user-85=hidden user-86=smrszyqg user-87=isleofwi user-88=cwsocial user-89=paulmca1 user-90=howardon user-91=pugwash user-92=reliable user-93=ninejimm user-94=cathski user-95=cambria1 user-96=courseme user-97=eugincou user-98=hirefootballgame user-99=asandcoc user-100=sibtoncc user-101=steve
Sep 28 10:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=bwppodcast user-104=nsceres user-105=fawcettd user-106=burydropin user-107=dhyana user-108=darkstar user-109=eatspam user-110=beauty user-111=boldover user-112=nove user-113=crrtipdl user-114=sosevalu user-115=bakery user-116=nvihkvu user-117=havantho user-118=sketchy user-119=cath user-120=what user-121=tstardom user-122=oubpgvbx user-123=design user-124=kategilpin user-125=dancinggardener user-126=stagingerris user-127=ladburyp user-128=jennimil user-129=tomandle user-130=david user-131=nbhavers user-132=careers user-133=mcdermos user-134=chrisdal user-135=onlycont user-136=lucy user-137=attlebor user-138=romaldki user-139=branko user-140=ranxterc user-141=hodgsonmail user-142=outdoorc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 10:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 10:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:41 nativespace-cdp sudo[27249]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:42 nativespace-cdp sudo[27261]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qgbxSnuSKUETGbSF.~
Sep 28 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:42 nativespace-cdp sudo[27264]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qgbxSnuSKUETGbSF.~'
Sep 28 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:42 nativespace-cdp sudo[27268]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qgbxSnuSKUETGbSF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:42 nativespace-cdp sudo[27272]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:42 nativespace-cdp sudo[27275]: pam_unix(sudo:session): session closed for user root
Sep 28 10:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 10:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 10:09:43 nativespace-cdp sudo[27298]: pam_unix(sudo:session): session closed for user root
Sep 28 10:11:34 nativespace-cdp sshd[27790]: Connection closed by 159.100.136.21 port 59574 [preauth]
Sep 28 10:16:35 nativespace-cdp sshd[29137]: Connection closed by 159.100.136.21 port 40488 [preauth]
Sep 28 10:21:33 nativespace-cdp sshd[30267]: Connection closed by 159.100.136.21 port 49406 [preauth]
Sep 28 10:21:42 nativespace-cdp sshd[30295]: Bad protocol version identification '\026\003\001' from 162.216.149.30 port 63776
Sep 28 10:21:43 nativespace-cdp sshd[30297]: Bad protocol version identification '\026\003\001' from 162.216.149.30 port 63780
Sep 28 10:26:33 nativespace-cdp sshd[31423]: Connection closed by 159.100.136.21 port 59448 [preauth]
Sep 28 10:31:35 nativespace-cdp sshd[820]: Connection closed by 159.100.136.21 port 40934 [preauth]
Sep 28 10:36:33 nativespace-cdp sshd[2093]: Connection closed by 159.100.136.21 port 50882 [preauth]
Sep 28 10:37:02 nativespace-cdp sshd[2161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.23.182.57  user=root
Sep 28 10:37:02 nativespace-cdp sshd[2161]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 10:37:03 nativespace-cdp sshd[2161]: Failed password for root from 64.23.182.57 port 58712 ssh2
Sep 28 10:37:03 nativespace-cdp sshd[2161]: Received disconnect from 64.23.182.57 port 58712:11: Bye Bye [preauth]
Sep 28 10:37:03 nativespace-cdp sshd[2161]: Disconnected from 64.23.182.57 port 58712 [preauth]
Sep 28 10:41:33 nativespace-cdp sshd[3335]: Connection closed by 159.100.136.21 port 60270 [preauth]
Sep 28 10:42:49 nativespace-cdp sshd[3666]: Invalid user dani from 64.23.182.57 port 55226
Sep 28 10:42:49 nativespace-cdp sshd[3666]: input_userauth_request: invalid user dani [preauth]
Sep 28 10:42:49 nativespace-cdp sshd[3666]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 10:42:49 nativespace-cdp sshd[3666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.23.182.57
Sep 28 10:42:51 nativespace-cdp sshd[3666]: Failed password for invalid user dani from 64.23.182.57 port 55226 ssh2
Sep 28 10:42:51 nativespace-cdp sshd[3666]: Received disconnect from 64.23.182.57 port 55226:11: Bye Bye [preauth]
Sep 28 10:42:51 nativespace-cdp sshd[3666]: Disconnected from 64.23.182.57 port 55226 [preauth]
Sep 28 10:43:33 nativespace-cdp sshd[3798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.23.182.57  user=root
Sep 28 10:43:33 nativespace-cdp sshd[3798]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 10:43:34 nativespace-cdp sshd[3798]: Failed password for root from 64.23.182.57 port 57860 ssh2
Sep 28 10:43:38 nativespace-cdp sshd[3798]: Received disconnect from 64.23.182.57 port 57860:11: Bye Bye [preauth]
Sep 28 10:43:38 nativespace-cdp sshd[3798]: Disconnected from 64.23.182.57 port 57860 [preauth]
Sep 28 10:44:39 nativespace-cdp sshd[4051]: Invalid user daniel from 47.239.238.149 port 35652
Sep 28 10:44:39 nativespace-cdp sshd[4051]: input_userauth_request: invalid user daniel [preauth]
Sep 28 10:44:39 nativespace-cdp sshd[4051]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 10:44:39 nativespace-cdp sshd[4051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.239.238.149
Sep 28 10:44:41 nativespace-cdp sshd[4051]: Failed password for invalid user daniel from 47.239.238.149 port 35652 ssh2
Sep 28 10:44:41 nativespace-cdp sshd[4051]: Received disconnect from 47.239.238.149 port 35652:11: Bye Bye [preauth]
Sep 28 10:44:41 nativespace-cdp sshd[4051]: Disconnected from 47.239.238.149 port 35652 [preauth]
Sep 28 10:45:28 nativespace-cdp sshd[4376]: Invalid user daniel from 47.239.238.149 port 42602
Sep 28 10:45:28 nativespace-cdp sshd[4376]: input_userauth_request: invalid user daniel [preauth]
Sep 28 10:45:28 nativespace-cdp sshd[4376]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 10:45:28 nativespace-cdp sshd[4376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.239.238.149
Sep 28 10:45:29 nativespace-cdp sshd[4376]: Failed password for invalid user daniel from 47.239.238.149 port 42602 ssh2
Sep 28 10:45:33 nativespace-cdp sshd[4376]: Received disconnect from 47.239.238.149 port 42602:11: Bye Bye [preauth]
Sep 28 10:45:33 nativespace-cdp sshd[4376]: Disconnected from 47.239.238.149 port 42602 [preauth]
Sep 28 10:45:50 nativespace-cdp sshd[4428]: Invalid user anand from 47.239.238.149 port 32842
Sep 28 10:45:50 nativespace-cdp sshd[4428]: input_userauth_request: invalid user anand [preauth]
Sep 28 10:45:50 nativespace-cdp sshd[4428]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 10:45:50 nativespace-cdp sshd[4428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.239.238.149
Sep 28 10:45:52 nativespace-cdp sshd[4428]: Failed password for invalid user anand from 47.239.238.149 port 32842 ssh2
Sep 28 10:45:52 nativespace-cdp sshd[4428]: Received disconnect from 47.239.238.149 port 32842:11: Bye Bye [preauth]
Sep 28 10:45:52 nativespace-cdp sshd[4428]: Disconnected from 47.239.238.149 port 32842 [preauth]
Sep 28 10:46:37 nativespace-cdp sshd[4598]: Connection closed by 159.100.136.21 port 41518 [preauth]
Sep 28 10:51:33 nativespace-cdp sshd[5989]: Connection closed by 159.100.136.21 port 50912 [preauth]
Sep 28 10:55:00 nativespace-cdp sshd[6608]: Invalid user steam from 150.136.129.10 port 50788
Sep 28 10:55:00 nativespace-cdp sshd[6608]: input_userauth_request: invalid user steam [preauth]
Sep 28 10:55:00 nativespace-cdp sshd[6608]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 10:55:00 nativespace-cdp sshd[6608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.129.10
Sep 28 10:55:02 nativespace-cdp sshd[6608]: Failed password for invalid user steam from 150.136.129.10 port 50788 ssh2
Sep 28 10:55:02 nativespace-cdp sshd[6608]: Received disconnect from 150.136.129.10 port 50788:11: Bye Bye [preauth]
Sep 28 10:55:02 nativespace-cdp sshd[6608]: Disconnected from 150.136.129.10 port 50788 [preauth]
Sep 28 10:55:18 nativespace-cdp sshd[6753]: Invalid user test_user from 24.199.109.15 port 48916
Sep 28 10:55:18 nativespace-cdp sshd[6753]: input_userauth_request: invalid user test_user [preauth]
Sep 28 10:55:18 nativespace-cdp sshd[6753]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 10:55:18 nativespace-cdp sshd[6753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.109.15
Sep 28 10:55:21 nativespace-cdp sshd[6753]: Failed password for invalid user test_user from 24.199.109.15 port 48916 ssh2
Sep 28 10:55:21 nativespace-cdp sshd[6753]: Received disconnect from 24.199.109.15 port 48916:11: Bye Bye [preauth]
Sep 28 10:55:21 nativespace-cdp sshd[6753]: Disconnected from 24.199.109.15 port 48916 [preauth]
Sep 28 10:55:52 nativespace-cdp sshd[6894]: Invalid user acer from 34.75.26.147 port 52588
Sep 28 10:55:52 nativespace-cdp sshd[6894]: input_userauth_request: invalid user acer [preauth]
Sep 28 10:55:52 nativespace-cdp sshd[6894]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 10:55:52 nativespace-cdp sshd[6894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.75.26.147
Sep 28 10:55:54 nativespace-cdp sshd[6894]: Failed password for invalid user acer from 34.75.26.147 port 52588 ssh2
Sep 28 10:55:54 nativespace-cdp sshd[6894]: Received disconnect from 34.75.26.147 port 52588:11: Bye Bye [preauth]
Sep 28 10:55:54 nativespace-cdp sshd[6894]: Disconnected from 34.75.26.147 port 52588 [preauth]
Sep 28 10:56:35 nativespace-cdp sshd[7001]: Connection closed by 159.100.136.21 port 60708 [preauth]
Sep 28 10:58:02 nativespace-cdp sshd[7213]: Invalid user cubrid from 81.170.214.174 port 46750
Sep 28 10:58:02 nativespace-cdp sshd[7213]: input_userauth_request: invalid user cubrid [preauth]
Sep 28 10:58:02 nativespace-cdp sshd[7213]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 10:58:02 nativespace-cdp sshd[7213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.170.214.174
Sep 28 10:58:04 nativespace-cdp sshd[7213]: Failed password for invalid user cubrid from 81.170.214.174 port 46750 ssh2
Sep 28 10:58:04 nativespace-cdp sshd[7213]: Received disconnect from 81.170.214.174 port 46750:11: Bye Bye [preauth]
Sep 28 10:58:04 nativespace-cdp sshd[7213]: Disconnected from 81.170.214.174 port 46750 [preauth]
Sep 28 10:59:27 nativespace-cdp sshd[7724]: Invalid user test01 from 89.216.47.154 port 46763
Sep 28 10:59:27 nativespace-cdp sshd[7724]: input_userauth_request: invalid user test01 [preauth]
Sep 28 10:59:27 nativespace-cdp sshd[7724]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 10:59:27 nativespace-cdp sshd[7724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154
Sep 28 10:59:29 nativespace-cdp sshd[7724]: Failed password for invalid user test01 from 89.216.47.154 port 46763 ssh2
Sep 28 10:59:29 nativespace-cdp sshd[7724]: Received disconnect from 89.216.47.154 port 46763:11: Bye Bye [preauth]
Sep 28 10:59:29 nativespace-cdp sshd[7724]: Disconnected from 89.216.47.154 port 46763 [preauth]
Sep 28 11:01:01 nativespace-cdp sshd[8247]: Invalid user sysadmin from 150.136.129.10 port 33998
Sep 28 11:01:01 nativespace-cdp sshd[8247]: input_userauth_request: invalid user sysadmin [preauth]
Sep 28 11:01:01 nativespace-cdp sshd[8247]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:01:01 nativespace-cdp sshd[8247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.129.10
Sep 28 11:01:03 nativespace-cdp sshd[8247]: Failed password for invalid user sysadmin from 150.136.129.10 port 33998 ssh2
Sep 28 11:01:03 nativespace-cdp sshd[8247]: Received disconnect from 150.136.129.10 port 33998:11: Bye Bye [preauth]
Sep 28 11:01:03 nativespace-cdp sshd[8247]: Disconnected from 150.136.129.10 port 33998 [preauth]
Sep 28 11:01:10 nativespace-cdp sshd[8296]: Invalid user cubrid from 34.75.26.147 port 52726
Sep 28 11:01:10 nativespace-cdp sshd[8296]: input_userauth_request: invalid user cubrid [preauth]
Sep 28 11:01:10 nativespace-cdp sshd[8296]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:01:10 nativespace-cdp sshd[8296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.75.26.147
Sep 28 11:01:12 nativespace-cdp sshd[8296]: Failed password for invalid user cubrid from 34.75.26.147 port 52726 ssh2
Sep 28 11:01:12 nativespace-cdp sshd[8296]: Received disconnect from 34.75.26.147 port 52726:11: Bye Bye [preauth]
Sep 28 11:01:12 nativespace-cdp sshd[8296]: Disconnected from 34.75.26.147 port 52726 [preauth]
Sep 28 11:01:19 nativespace-cdp sshd[8316]: Invalid user acer from 193.118.61.118 port 48178
Sep 28 11:01:19 nativespace-cdp sshd[8316]: input_userauth_request: invalid user acer [preauth]
Sep 28 11:01:19 nativespace-cdp sshd[8316]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:01:19 nativespace-cdp sshd[8316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.118.61.118
Sep 28 11:01:22 nativespace-cdp sshd[8316]: Failed password for invalid user acer from 193.118.61.118 port 48178 ssh2
Sep 28 11:01:22 nativespace-cdp sshd[8316]: Received disconnect from 193.118.61.118 port 48178:11: Bye Bye [preauth]
Sep 28 11:01:22 nativespace-cdp sshd[8316]: Disconnected from 193.118.61.118 port 48178 [preauth]
Sep 28 11:01:24 nativespace-cdp sshd[8326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.109.15  user=root
Sep 28 11:01:24 nativespace-cdp sshd[8326]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 11:01:26 nativespace-cdp sshd[8326]: Failed password for root from 24.199.109.15 port 44668 ssh2
Sep 28 11:01:32 nativespace-cdp sshd[8326]: Received disconnect from 24.199.109.15 port 44668:11: Bye Bye [preauth]
Sep 28 11:01:32 nativespace-cdp sshd[8326]: Disconnected from 24.199.109.15 port 44668 [preauth]
Sep 28 11:01:33 nativespace-cdp sshd[8352]: Connection closed by 159.100.136.21 port 41926 [preauth]
Sep 28 11:01:40 nativespace-cdp sshd[8367]: Invalid user thomas from 89.216.47.154 port 59854
Sep 28 11:01:40 nativespace-cdp sshd[8367]: input_userauth_request: invalid user thomas [preauth]
Sep 28 11:01:40 nativespace-cdp sshd[8367]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:01:40 nativespace-cdp sshd[8367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154
Sep 28 11:01:42 nativespace-cdp sshd[8367]: Failed password for invalid user thomas from 89.216.47.154 port 59854 ssh2
Sep 28 11:01:42 nativespace-cdp sshd[8367]: Received disconnect from 89.216.47.154 port 59854:11: Bye Bye [preauth]
Sep 28 11:01:42 nativespace-cdp sshd[8367]: Disconnected from 89.216.47.154 port 59854 [preauth]
Sep 28 11:01:42 nativespace-cdp sshd[8373]: Invalid user ubuntu from 150.136.129.10 port 47150
Sep 28 11:01:42 nativespace-cdp sshd[8373]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 11:01:42 nativespace-cdp sshd[8373]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:01:42 nativespace-cdp sshd[8373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.129.10
Sep 28 11:01:44 nativespace-cdp sshd[8373]: Failed password for invalid user ubuntu from 150.136.129.10 port 47150 ssh2
Sep 28 11:01:44 nativespace-cdp sshd[8373]: Received disconnect from 150.136.129.10 port 47150:11: Bye Bye [preauth]
Sep 28 11:01:44 nativespace-cdp sshd[8373]: Disconnected from 150.136.129.10 port 47150 [preauth]
Sep 28 11:01:45 nativespace-cdp sshd[8380]: Invalid user user from 34.75.26.147 port 51672
Sep 28 11:01:45 nativespace-cdp sshd[8380]: input_userauth_request: invalid user user [preauth]
Sep 28 11:01:45 nativespace-cdp sshd[8380]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:01:45 nativespace-cdp sshd[8380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.75.26.147
Sep 28 11:01:47 nativespace-cdp sshd[8380]: Failed password for invalid user user from 34.75.26.147 port 51672 ssh2
Sep 28 11:01:47 nativespace-cdp sshd[8380]: Received disconnect from 34.75.26.147 port 51672:11: Bye Bye [preauth]
Sep 28 11:01:47 nativespace-cdp sshd[8380]: Disconnected from 34.75.26.147 port 51672 [preauth]
Sep 28 11:01:55 nativespace-cdp sshd[8445]: Invalid user nexus from 81.170.214.174 port 36466
Sep 28 11:01:55 nativespace-cdp sshd[8445]: input_userauth_request: invalid user nexus [preauth]
Sep 28 11:01:55 nativespace-cdp sshd[8445]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:01:55 nativespace-cdp sshd[8445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.170.214.174
Sep 28 11:01:57 nativespace-cdp sshd[8445]: Failed password for invalid user nexus from 81.170.214.174 port 36466 ssh2
Sep 28 11:01:57 nativespace-cdp sshd[8445]: Received disconnect from 81.170.214.174 port 36466:11: Bye Bye [preauth]
Sep 28 11:01:57 nativespace-cdp sshd[8445]: Disconnected from 81.170.214.174 port 36466 [preauth]
Sep 28 11:02:07 nativespace-cdp sshd[8513]: Invalid user ubuntu from 193.118.61.118 port 39516
Sep 28 11:02:07 nativespace-cdp sshd[8513]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 11:02:07 nativespace-cdp sshd[8513]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:02:07 nativespace-cdp sshd[8513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.118.61.118
Sep 28 11:02:08 nativespace-cdp sshd[8500]: Invalid user user from 24.199.109.15 port 55668
Sep 28 11:02:08 nativespace-cdp sshd[8500]: input_userauth_request: invalid user user [preauth]
Sep 28 11:02:08 nativespace-cdp sshd[8500]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:02:08 nativespace-cdp sshd[8500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.109.15
Sep 28 11:02:09 nativespace-cdp sshd[8513]: Failed password for invalid user ubuntu from 193.118.61.118 port 39516 ssh2
Sep 28 11:02:09 nativespace-cdp sshd[8513]: Received disconnect from 193.118.61.118 port 39516:11: Bye Bye [preauth]
Sep 28 11:02:09 nativespace-cdp sshd[8513]: Disconnected from 193.118.61.118 port 39516 [preauth]
Sep 28 11:02:09 nativespace-cdp sshd[8500]: Failed password for invalid user user from 24.199.109.15 port 55668 ssh2
Sep 28 11:02:09 nativespace-cdp sshd[8500]: Received disconnect from 24.199.109.15 port 55668:11: Bye Bye [preauth]
Sep 28 11:02:09 nativespace-cdp sshd[8500]: Disconnected from 24.199.109.15 port 55668 [preauth]
Sep 28 11:02:17 nativespace-cdp sshd[8559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154  user=root
Sep 28 11:02:17 nativespace-cdp sshd[8559]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 11:02:19 nativespace-cdp sshd[8559]: Failed password for root from 89.216.47.154 port 37909 ssh2
Sep 28 11:02:19 nativespace-cdp sshd[8559]: Received disconnect from 89.216.47.154 port 37909:11: Bye Bye [preauth]
Sep 28 11:02:19 nativespace-cdp sshd[8559]: Disconnected from 89.216.47.154 port 37909 [preauth]
Sep 28 11:02:37 nativespace-cdp sshd[8619]: Invalid user test from 81.170.214.174 port 60404
Sep 28 11:02:37 nativespace-cdp sshd[8619]: input_userauth_request: invalid user test [preauth]
Sep 28 11:02:37 nativespace-cdp sshd[8619]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:02:37 nativespace-cdp sshd[8619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.170.214.174
Sep 28 11:02:39 nativespace-cdp sshd[8619]: Failed password for invalid user test from 81.170.214.174 port 60404 ssh2
Sep 28 11:02:40 nativespace-cdp sshd[8619]: Received disconnect from 81.170.214.174 port 60404:11: Bye Bye [preauth]
Sep 28 11:02:40 nativespace-cdp sshd[8619]: Disconnected from 81.170.214.174 port 60404 [preauth]
Sep 28 11:02:54 nativespace-cdp sshd[8674]: Invalid user odoo from 193.118.61.118 port 47990
Sep 28 11:02:54 nativespace-cdp sshd[8674]: input_userauth_request: invalid user odoo [preauth]
Sep 28 11:02:54 nativespace-cdp sshd[8674]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:02:54 nativespace-cdp sshd[8674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.118.61.118
Sep 28 11:02:56 nativespace-cdp sshd[8674]: Failed password for invalid user odoo from 193.118.61.118 port 47990 ssh2
Sep 28 11:02:58 nativespace-cdp sshd[8674]: Received disconnect from 193.118.61.118 port 47990:11: Bye Bye [preauth]
Sep 28 11:02:58 nativespace-cdp sshd[8674]: Disconnected from 193.118.61.118 port 47990 [preauth]
Sep 28 11:06:33 nativespace-cdp sshd[9482]: Connection closed by 159.100.136.21 port 51236 [preauth]
Sep 28 11:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 11:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:20 nativespace-cdp sudo[9962]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 11:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:20 nativespace-cdp sudo[9966]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 11:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:22 nativespace-cdp sudo[9970]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 11:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:22 nativespace-cdp sudo[9978]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 11:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:43 nativespace-cdp sudo[9981]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 11:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:43 nativespace-cdp sudo[10046]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:44 nativespace-cdp sudo[10049]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:44 nativespace-cdp sudo[10052]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:44 nativespace-cdp sudo[10055]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:44 nativespace-cdp sudo[10058]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:44 nativespace-cdp sudo[10061]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:58 nativespace-cdp sudo[10182]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:09:59 nativespace-cdp sudo[10187]: pam_unix(sudo:session): session closed for user root
Sep 28 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=hodgesonweb user-3=theblack user-4=spectrum user-5=agproduc user-6=still user-7=leereyn1 user-8=stephani user-9=markward user-10=booff user-11=foundation user-12=lbscrmod user-13=maflemin user-14=vantagep user-15=connect9 user-16=athenare user-17=ulsukarm user-18=martsblo user-19=ptkxhsbt user-20=dickemery123 user-21=hhdugcor user-22=lbhyisi user-23=magichat user-24=lakesan1 user-25=brmrjxl user-26=atestord user-27=sarafoundation user-28=strathar user-29=wilsonsw user-30=megacards user-31=musorguk user-32=elecleis user-33=gilpin user-34=milloyco user-35=fetch user-36=carsinyo user-37=hubmaster user-38=ianrayne user-39=accooper user-40=thqkgnbz user-41=connectedshoppin user-42=firstres user-43=ultbcrra user-44=seftvta user-45=jonhartl user-46=coursemc user-47=opaiscyx
Sep 28 11:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=costestimatorco user-49=clarkass user-50=firstrel user-51=highlegh user-52=southlon user-53=firstred user-54=skyfirec user-55=alexadmin user-56=askhform user-57=stuartge user-58=innovat1 user-59=nativene user-60=nstriton user-61=brighto1 user-62=oneoarco user-63=battlere user-64=vivienn1 user-65=firstre2 user-66=bedfords user-67=bemadonn user-68=newstoda user-69=ggaaorgu user-70=belle user-71=fawcettd user-72=burydropin user-73=nsceres user-74=darkstar user-75=eatspam user-76=beauty user-77=dhyana user-78=asandcoc user-79=sibtoncc user-80=zebrapho user-81=bwppodcast user-82=steve user-83=ninejimm user-84=reliable user-85=cambria1 user-86=cathski user-87=cwsocial user-88=paulmca1 user-89=pugwash user-90=howardon user-91=hirefootballgame user-92=courseme user-93=eugincou user-94=leftie user-95=foods user-96=fortunaz user-97=health2045 user-98=nscdp user-99=steakbridieme user-100=firstre5
Sep 28 11:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-101=donnychicago user-102=philmcph user-103=ctedorgu user-104=lkpier user-105=smrszyqg user-106=isleofwi user-107=barbersh user-108=tigerlet user-109=nomistakes user-110=hidden user-111=lucy user-112=attlebor user-113=onlycont user-114=branko user-115=hodgsonmail user-116=outdoorc user-117=ranxterc user-118=romaldki user-119=tomandle user-120=jennimil user-121=mcdermos user-122=chrisdal user-123=david user-124=nbhavers user-125=careers user-126=what user-127=tstardom user-128=oubpgvbx user-129=nvihkvu user-130=havantho user-131=sketchy user-132=cath user-133=kategilpin user-134=stagingerris user-135=dancinggardener user-136=ladburyp user-137=design user-138=nove user-139=boldover user-140=crrtipdl user-141=sosevalu user-142=bakery feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 28 11:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:00 nativespace-cdp sudo[10193]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 28 11:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:02 nativespace-cdp sudo[10211]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 28 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 28 11:10:02 nativespace-cdp sudo[10310]: pam_unix(sudo:session): session closed for user onlycont
Sep 28 11:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 28 11:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:04 nativespace-cdp sudo[10346]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 28 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 11:10:04 nativespace-cdp sudo[10357]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 11:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 28 11:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:07 nativespace-cdp sudo[10380]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 28 11:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 28 11:10:07 nativespace-cdp sudo[10385]: pam_unix(sudo:session): session closed for user lkpier
Sep 28 11:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 28 11:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:08 nativespace-cdp sudo[10396]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 28 11:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 28 11:10:08 nativespace-cdp sudo[10402]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 28 11:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 28 11:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 28 11:10:09 nativespace-cdp sudo[10414]: pam_unix(sudo:session): session closed for user oneoarco
Sep 28 11:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 28 11:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:10 nativespace-cdp sudo[10426]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 28 11:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 28 11:10:10 nativespace-cdp sudo[10434]: pam_unix(sudo:session): session closed for user fortunaz
Sep 28 11:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 28 11:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:10 nativespace-cdp sudo[10445]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 11:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:10 nativespace-cdp sudo[10448]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 28 11:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:26 nativespace-cdp sudo[11376]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 28 11:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:26 nativespace-cdp sudo[11382]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 11:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:27 nativespace-cdp sudo[11392]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CRRzIgbF3U2Sg1b9.~
Sep 28 11:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:27 nativespace-cdp sudo[11396]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CRRzIgbF3U2Sg1b9.~'
Sep 28 11:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:27 nativespace-cdp sudo[11399]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CRRzIgbF3U2Sg1b9.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 11:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:27 nativespace-cdp sudo[11403]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 11:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:28 nativespace-cdp sudo[11406]: pam_unix(sudo:session): session closed for user root
Sep 28 11:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 11:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 11:10:29 nativespace-cdp sudo[11419]: pam_unix(sudo:session): session closed for user root
Sep 28 11:11:33 nativespace-cdp sshd[11571]: Connection closed by 159.100.136.21 port 60684 [preauth]
Sep 28 11:16:33 nativespace-cdp sshd[12886]: Connection closed by 159.100.136.21 port 41976 [preauth]
Sep 28 11:17:36 nativespace-cdp sshd[13026]: Invalid user usuario from 91.219.60.147 port 46338
Sep 28 11:17:36 nativespace-cdp sshd[13026]: input_userauth_request: invalid user usuario [preauth]
Sep 28 11:17:36 nativespace-cdp sshd[13026]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:17:36 nativespace-cdp sshd[13026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.219.60.147
Sep 28 11:17:38 nativespace-cdp sshd[13026]: Failed password for invalid user usuario from 91.219.60.147 port 46338 ssh2
Sep 28 11:17:38 nativespace-cdp sshd[13026]: Received disconnect from 91.219.60.147 port 46338:11: Bye Bye [preauth]
Sep 28 11:17:38 nativespace-cdp sshd[13026]: Disconnected from 91.219.60.147 port 46338 [preauth]
Sep 28 11:18:35 nativespace-cdp sshd[13166]: Invalid user test2 from 186.235.70.45 port 34196
Sep 28 11:18:35 nativespace-cdp sshd[13166]: input_userauth_request: invalid user test2 [preauth]
Sep 28 11:18:35 nativespace-cdp sshd[13166]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:18:35 nativespace-cdp sshd[13166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.45
Sep 28 11:18:37 nativespace-cdp sshd[13166]: Failed password for invalid user test2 from 186.235.70.45 port 34196 ssh2
Sep 28 11:18:37 nativespace-cdp sshd[13166]: Received disconnect from 186.235.70.45 port 34196:11: Bye Bye [preauth]
Sep 28 11:18:37 nativespace-cdp sshd[13166]: Disconnected from 186.235.70.45 port 34196 [preauth]
Sep 28 11:21:13 nativespace-cdp sshd[13828]: Invalid user test from 77.52.19.44 port 53130
Sep 28 11:21:13 nativespace-cdp sshd[13828]: input_userauth_request: invalid user test [preauth]
Sep 28 11:21:13 nativespace-cdp sshd[13828]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:21:13 nativespace-cdp sshd[13828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44
Sep 28 11:21:15 nativespace-cdp sshd[13828]: Failed password for invalid user test from 77.52.19.44 port 53130 ssh2
Sep 28 11:21:15 nativespace-cdp sshd[13828]: Received disconnect from 77.52.19.44 port 53130:11: Bye Bye [preauth]
Sep 28 11:21:15 nativespace-cdp sshd[13828]: Disconnected from 77.52.19.44 port 53130 [preauth]
Sep 28 11:21:34 nativespace-cdp sshd[13894]: Connection closed by 159.100.136.21 port 51186 [preauth]
Sep 28 11:22:53 nativespace-cdp sshd[14067]: Invalid user odoo from 91.219.60.147 port 46566
Sep 28 11:22:53 nativespace-cdp sshd[14067]: input_userauth_request: invalid user odoo [preauth]
Sep 28 11:22:53 nativespace-cdp sshd[14067]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:22:53 nativespace-cdp sshd[14067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.219.60.147
Sep 28 11:22:55 nativespace-cdp sshd[14067]: Failed password for invalid user odoo from 91.219.60.147 port 46566 ssh2
Sep 28 11:22:55 nativespace-cdp sshd[14067]: Received disconnect from 91.219.60.147 port 46566:11: Bye Bye [preauth]
Sep 28 11:22:55 nativespace-cdp sshd[14067]: Disconnected from 91.219.60.147 port 46566 [preauth]
Sep 28 11:22:56 nativespace-cdp sshd[14073]: Invalid user abhishek from 186.235.70.47 port 50396
Sep 28 11:22:56 nativespace-cdp sshd[14073]: input_userauth_request: invalid user abhishek [preauth]
Sep 28 11:22:56 nativespace-cdp sshd[14073]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:22:56 nativespace-cdp sshd[14073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.47
Sep 28 11:22:58 nativespace-cdp sshd[14073]: Failed password for invalid user abhishek from 186.235.70.47 port 50396 ssh2
Sep 28 11:22:58 nativespace-cdp sshd[14073]: Received disconnect from 186.235.70.47 port 50396:11: Bye Bye [preauth]
Sep 28 11:22:58 nativespace-cdp sshd[14073]: Disconnected from 186.235.70.47 port 50396 [preauth]
Sep 28 11:23:06 nativespace-cdp sshd[14109]: Invalid user abhishek from 177.200.34.186 port 48655
Sep 28 11:23:06 nativespace-cdp sshd[14109]: input_userauth_request: invalid user abhishek [preauth]
Sep 28 11:23:06 nativespace-cdp sshd[14109]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:23:06 nativespace-cdp sshd[14109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.200.34.186
Sep 28 11:23:09 nativespace-cdp sshd[14109]: Failed password for invalid user abhishek from 177.200.34.186 port 48655 ssh2
Sep 28 11:23:09 nativespace-cdp sshd[14109]: Received disconnect from 177.200.34.186 port 48655:11: Bye Bye [preauth]
Sep 28 11:23:09 nativespace-cdp sshd[14109]: Disconnected from 177.200.34.186 port 48655 [preauth]
Sep 28 11:23:36 nativespace-cdp sshd[14187]: Invalid user superman from 91.219.60.147 port 46628
Sep 28 11:23:36 nativespace-cdp sshd[14187]: input_userauth_request: invalid user superman [preauth]
Sep 28 11:23:36 nativespace-cdp sshd[14187]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:23:36 nativespace-cdp sshd[14187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.219.60.147
Sep 28 11:23:39 nativespace-cdp sshd[14187]: Failed password for invalid user superman from 91.219.60.147 port 46628 ssh2
Sep 28 11:23:39 nativespace-cdp sshd[14187]: Received disconnect from 91.219.60.147 port 46628:11: Bye Bye [preauth]
Sep 28 11:23:39 nativespace-cdp sshd[14187]: Disconnected from 91.219.60.147 port 46628 [preauth]
Sep 28 11:23:40 nativespace-cdp sshd[14196]: Invalid user test from 77.52.19.44 port 50466
Sep 28 11:23:40 nativespace-cdp sshd[14196]: input_userauth_request: invalid user test [preauth]
Sep 28 11:23:40 nativespace-cdp sshd[14196]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:23:40 nativespace-cdp sshd[14196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44
Sep 28 11:23:42 nativespace-cdp sshd[14196]: Failed password for invalid user test from 77.52.19.44 port 50466 ssh2
Sep 28 11:23:42 nativespace-cdp sshd[14196]: Received disconnect from 77.52.19.44 port 50466:11: Bye Bye [preauth]
Sep 28 11:23:42 nativespace-cdp sshd[14196]: Disconnected from 77.52.19.44 port 50466 [preauth]
Sep 28 11:23:52 nativespace-cdp sshd[14239]: Invalid user nexus from 186.235.70.47 port 36490
Sep 28 11:23:52 nativespace-cdp sshd[14239]: input_userauth_request: invalid user nexus [preauth]
Sep 28 11:23:52 nativespace-cdp sshd[14239]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:23:52 nativespace-cdp sshd[14239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.47
Sep 28 11:23:54 nativespace-cdp sshd[14239]: Failed password for invalid user nexus from 186.235.70.47 port 36490 ssh2
Sep 28 11:23:58 nativespace-cdp sshd[14239]: Received disconnect from 186.235.70.47 port 36490:11: Bye Bye [preauth]
Sep 28 11:23:58 nativespace-cdp sshd[14239]: Disconnected from 186.235.70.47 port 36490 [preauth]
Sep 28 11:24:25 nativespace-cdp sshd[14331]: Invalid user ubuntu from 77.52.19.44 port 33702
Sep 28 11:24:25 nativespace-cdp sshd[14331]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 11:24:25 nativespace-cdp sshd[14331]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:24:25 nativespace-cdp sshd[14331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44
Sep 28 11:24:25 nativespace-cdp sshd[14329]: Invalid user tomcat from 177.200.34.186 port 19034
Sep 28 11:24:25 nativespace-cdp sshd[14329]: input_userauth_request: invalid user tomcat [preauth]
Sep 28 11:24:25 nativespace-cdp sshd[14329]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:24:25 nativespace-cdp sshd[14329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.200.34.186
Sep 28 11:24:27 nativespace-cdp sshd[14331]: Failed password for invalid user ubuntu from 77.52.19.44 port 33702 ssh2
Sep 28 11:24:27 nativespace-cdp sshd[14329]: Failed password for invalid user tomcat from 177.200.34.186 port 19034 ssh2
Sep 28 11:24:29 nativespace-cdp sshd[14329]: Received disconnect from 177.200.34.186 port 19034:11: Bye Bye [preauth]
Sep 28 11:24:29 nativespace-cdp sshd[14329]: Disconnected from 177.200.34.186 port 19034 [preauth]
Sep 28 11:24:44 nativespace-cdp sshd[14394]: Invalid user test_user from 186.235.70.47 port 50814
Sep 28 11:24:44 nativespace-cdp sshd[14394]: input_userauth_request: invalid user test_user [preauth]
Sep 28 11:24:44 nativespace-cdp sshd[14394]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:24:44 nativespace-cdp sshd[14394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.47
Sep 28 11:24:46 nativespace-cdp sshd[14394]: Failed password for invalid user test_user from 186.235.70.47 port 50814 ssh2
Sep 28 11:24:46 nativespace-cdp sshd[14394]: Received disconnect from 186.235.70.47 port 50814:11: Bye Bye [preauth]
Sep 28 11:24:46 nativespace-cdp sshd[14394]: Disconnected from 186.235.70.47 port 50814 [preauth]
Sep 28 11:25:40 nativespace-cdp sshd[14769]: Invalid user ubuntu from 177.200.34.186 port 4153
Sep 28 11:25:40 nativespace-cdp sshd[14769]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 11:25:40 nativespace-cdp sshd[14769]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:25:40 nativespace-cdp sshd[14769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.200.34.186
Sep 28 11:25:43 nativespace-cdp sshd[14769]: Failed password for invalid user ubuntu from 177.200.34.186 port 4153 ssh2
Sep 28 11:26:33 nativespace-cdp sshd[14956]: Connection closed by 159.100.136.21 port 32894 [preauth]
Sep 28 11:28:00 nativespace-cdp sshd[15164]: Invalid user sysadmin from 186.235.70.44 port 51638
Sep 28 11:28:00 nativespace-cdp sshd[15164]: input_userauth_request: invalid user sysadmin [preauth]
Sep 28 11:28:00 nativespace-cdp sshd[15164]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:28:00 nativespace-cdp sshd[15164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.44
Sep 28 11:28:03 nativespace-cdp sshd[15164]: Failed password for invalid user sysadmin from 186.235.70.44 port 51638 ssh2
Sep 28 11:28:06 nativespace-cdp sshd[15164]: Received disconnect from 186.235.70.44 port 51638:11: Bye Bye [preauth]
Sep 28 11:28:06 nativespace-cdp sshd[15164]: Disconnected from 186.235.70.44 port 51638 [preauth]
Sep 28 11:29:41 nativespace-cdp sshd[15504]: Invalid user user from 186.235.70.44 port 52052
Sep 28 11:29:41 nativespace-cdp sshd[15504]: input_userauth_request: invalid user user [preauth]
Sep 28 11:29:42 nativespace-cdp sshd[15504]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:29:42 nativespace-cdp sshd[15504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.44
Sep 28 11:29:44 nativespace-cdp sshd[15504]: Failed password for invalid user user from 186.235.70.44 port 52052 ssh2
Sep 28 11:29:44 nativespace-cdp sshd[15504]: Received disconnect from 186.235.70.44 port 52052:11: Bye Bye [preauth]
Sep 28 11:29:44 nativespace-cdp sshd[15504]: Disconnected from 186.235.70.44 port 52052 [preauth]
Sep 28 11:30:32 nativespace-cdp sshd[15881]: Invalid user steam from 186.235.70.40 port 38140
Sep 28 11:30:32 nativespace-cdp sshd[15881]: input_userauth_request: invalid user steam [preauth]
Sep 28 11:30:32 nativespace-cdp sshd[15881]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:30:32 nativespace-cdp sshd[15881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.40
Sep 28 11:30:34 nativespace-cdp sshd[15881]: Failed password for invalid user steam from 186.235.70.40 port 38140 ssh2
Sep 28 11:30:35 nativespace-cdp sshd[15881]: Received disconnect from 186.235.70.40 port 38140:11: Bye Bye [preauth]
Sep 28 11:30:35 nativespace-cdp sshd[15881]: Disconnected from 186.235.70.40 port 38140 [preauth]
Sep 28 11:31:24 nativespace-cdp sshd[16198]: Invalid user ubuntu from 186.235.70.40 port 52464
Sep 28 11:31:24 nativespace-cdp sshd[16198]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 11:31:24 nativespace-cdp sshd[16198]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:31:24 nativespace-cdp sshd[16198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.40
Sep 28 11:31:27 nativespace-cdp sshd[16198]: Failed password for invalid user ubuntu from 186.235.70.40 port 52464 ssh2
Sep 28 11:31:27 nativespace-cdp sshd[16198]: Received disconnect from 186.235.70.40 port 52464:11: Bye Bye [preauth]
Sep 28 11:31:27 nativespace-cdp sshd[16198]: Disconnected from 186.235.70.40 port 52464 [preauth]
Sep 28 11:31:33 nativespace-cdp sshd[16229]: Connection closed by 159.100.136.21 port 41932 [preauth]
Sep 28 11:32:15 nativespace-cdp sshd[16344]: Connection closed by 186.235.70.40 port 38552 [preauth]
Sep 28 11:33:03 nativespace-cdp sshd[16479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.45  user=root
Sep 28 11:33:03 nativespace-cdp sshd[16479]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 11:33:05 nativespace-cdp sshd[16479]: Failed password for root from 186.235.70.45 port 52876 ssh2
Sep 28 11:33:05 nativespace-cdp sshd[16479]: Received disconnect from 186.235.70.45 port 52876:11: Bye Bye [preauth]
Sep 28 11:33:05 nativespace-cdp sshd[16479]: Disconnected from 186.235.70.45 port 52876 [preauth]
Sep 28 11:34:10 nativespace-cdp sshd[16721]: Invalid user user from 186.235.70.45 port 38984
Sep 28 11:34:10 nativespace-cdp sshd[16721]: input_userauth_request: invalid user user [preauth]
Sep 28 11:34:10 nativespace-cdp sshd[16721]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:34:10 nativespace-cdp sshd[16721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.45
Sep 28 11:34:12 nativespace-cdp sshd[16721]: Failed password for invalid user user from 186.235.70.45 port 38984 ssh2
Sep 28 11:34:15 nativespace-cdp sshd[16721]: Received disconnect from 186.235.70.45 port 38984:11: Bye Bye [preauth]
Sep 28 11:34:15 nativespace-cdp sshd[16721]: Disconnected from 186.235.70.45 port 38984 [preauth]
Sep 28 11:36:00 nativespace-cdp sshd[17431]: Invalid user tomcat from 186.235.70.44 port 39402
Sep 28 11:36:00 nativespace-cdp sshd[17431]: input_userauth_request: invalid user tomcat [preauth]
Sep 28 11:36:00 nativespace-cdp sshd[17431]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:36:00 nativespace-cdp sshd[17431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.44
Sep 28 11:36:02 nativespace-cdp sshd[17431]: Failed password for invalid user tomcat from 186.235.70.44 port 39402 ssh2
Sep 28 11:36:02 nativespace-cdp sshd[17431]: Received disconnect from 186.235.70.44 port 39402:11: Bye Bye [preauth]
Sep 28 11:36:02 nativespace-cdp sshd[17431]: Disconnected from 186.235.70.44 port 39402 [preauth]
Sep 28 11:36:33 nativespace-cdp sshd[17557]: Connection closed by 159.100.136.21 port 51790 [preauth]
Sep 28 11:36:48 nativespace-cdp sshd[17585]: Invalid user test01 from 186.235.70.40 port 53724
Sep 28 11:36:48 nativespace-cdp sshd[17585]: input_userauth_request: invalid user test01 [preauth]
Sep 28 11:36:48 nativespace-cdp sshd[17585]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 11:36:48 nativespace-cdp sshd[17585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.40
Sep 28 11:36:50 nativespace-cdp sshd[17585]: Failed password for invalid user test01 from 186.235.70.40 port 53724 ssh2
Sep 28 11:36:50 nativespace-cdp sshd[17585]: Received disconnect from 186.235.70.40 port 53724:11: Bye Bye [preauth]
Sep 28 11:36:50 nativespace-cdp sshd[17585]: Disconnected from 186.235.70.40 port 53724 [preauth]
Sep 28 11:41:34 nativespace-cdp sshd[18514]: Connection closed by 159.100.136.21 port 33068 [preauth]
Sep 28 11:46:35 nativespace-cdp sshd[19915]: Connection closed by 159.100.136.21 port 42656 [preauth]
Sep 28 11:51:36 nativespace-cdp sshd[20923]: Connection closed by 159.100.136.21 port 51994 [preauth]
Sep 28 11:56:36 nativespace-cdp sshd[21863]: Connection closed by 159.100.136.21 port 33568 [preauth]
Sep 28 12:01:33 nativespace-cdp sshd[23198]: Connection closed by 159.100.136.21 port 42752 [preauth]
Sep 28 12:06:33 nativespace-cdp sshd[24354]: Connection closed by 159.100.136.21 port 51648 [preauth]
Sep 28 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:15 nativespace-cdp sudo[24808]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:15 nativespace-cdp sudo[24811]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:15 nativespace-cdp sudo[24814]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:15 nativespace-cdp sudo[24819]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:18 nativespace-cdp sudo[24822]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 12:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:18 nativespace-cdp sudo[24834]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 12:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:18 nativespace-cdp sudo[24837]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 12:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:18 nativespace-cdp sudo[24840]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 12:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:18 nativespace-cdp sudo[24844]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 12:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:18 nativespace-cdp sudo[24847]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 12:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:18 nativespace-cdp sudo[24851]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:22 nativespace-cdp sudo[24863]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:22 nativespace-cdp sudo[24867]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=athenare user-2=connect9 user-3=vantagep user-4=maflemin user-5=lbscrmod user-6=foundation user-7=booff user-8=markward user-9=ulsukarm user-10=spectrum user-11=hodgesonweb user-12=theblack user-13=jarvisin user-14=stephani user-15=leereyn1 user-16=still user-17=agproduc user-18=strathar user-19=sarafoundation user-20=atestord user-21=lakesan1 user-22=brmrjxl user-23=musorguk user-24=megacards user-25=wilsonsw user-26=dickemery123 user-27=ptkxhsbt user-28=martsblo user-29=magichat user-30=lbhyisi user-31=hhdugcor user-32=opaiscyx user-33=coursemc user-34=seftvta user-35=jonhartl user-36=ultbcrra user-37=firstres user-38=firstred user-39=southlon user-40=highlegh user-41=firstrel user-42=clarkass user-43=costestimatorco user-44=hubmaster user-45=carsinyo user-46=fetch user-47=gilpin
Sep 28 12:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=milloyco user-49=elecleis user-50=connectedshoppin user-51=thqkgnbz user-52=accooper user-53=ianrayne user-54=firstre2 user-55=vivienn1 user-56=battlere user-57=oneoarco user-58=brighto1 user-59=nstriton user-60=belle user-61=ggaaorgu user-62=newstoda user-63=bemadonn user-64=bedfords user-65=skyfirec user-66=alexadmin user-67=nativene user-68=innovat1 user-69=askhform user-70=stuartge user-71=sibtoncc user-72=asandcoc user-73=steve user-74=bwppodcast user-75=zebrapho user-76=nsceres user-77=burydropin user-78=fawcettd user-79=dhyana user-80=beauty user-81=eatspam user-82=darkstar user-83=lkpier user-84=ctedorgu user-85=philmcph user-86=donnychicago user-87=firstre5 user-88=steakbridieme user-89=nscdp user-90=health2045 user-91=fortunaz user-92=leftie user-93=foods user-94=hidden user-95=nomistakes user-96=barbersh user-97=tigerlet user-98=smrszyqg user-99=isleofwi user-100=paulmca1 user-101=pugwash
Sep 28 12:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=howardon user-103=cwsocial user-104=cathski user-105=cambria1 user-106=ninejimm user-107=reliable user-108=eugincou user-109=courseme user-110=hirefootballgame user-111=jennimil user-112=tomandle user-113=careers user-114=nbhavers user-115=david user-116=chrisdal user-117=mcdermos user-118=onlycont user-119=attlebor user-120=lucy user-121=romaldki user-122=outdoorc user-123=hodgsonmail user-124=ranxterc user-125=branko user-126=boldover user-127=nove user-128=bakery user-129=sosevalu user-130=crrtipdl user-131=cath user-132=sketchy user-133=havantho user-134=nvihkvu user-135=tstardom user-136=oubpgvbx user-137=what user-138=design user-139=ladburyp user-140=stagingerris user-141=dancinggardener user-142=kategilpin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 28 12:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:23 nativespace-cdp sudo[24874]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 12:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:23 nativespace-cdp sudo[24884]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Zy44WlN8eXWpwsd4.~
Sep 28 12:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:23 nativespace-cdp sudo[24887]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Zy44WlN8eXWpwsd4.~'
Sep 28 12:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:23 nativespace-cdp sudo[24890]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Zy44WlN8eXWpwsd4.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 12:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:23 nativespace-cdp sudo[24894]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 12:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:23 nativespace-cdp sudo[24897]: pam_unix(sudo:session): session closed for user root
Sep 28 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 12:09:41 nativespace-cdp sudo[24952]: pam_unix(sudo:session): session closed for user root
Sep 28 12:11:36 nativespace-cdp sshd[25475]: Connection closed by 159.100.136.21 port 33008 [preauth]
Sep 28 12:16:33 nativespace-cdp sshd[26877]: Connection closed by 159.100.136.21 port 42772 [preauth]
Sep 28 12:21:33 nativespace-cdp sshd[27914]: Connection closed by 159.100.136.21 port 52666 [preauth]
Sep 28 12:26:34 nativespace-cdp sshd[28864]: Connection closed by 159.100.136.21 port 34334 [preauth]
Sep 28 12:31:33 nativespace-cdp sshd[30058]: Connection closed by 159.100.136.21 port 43664 [preauth]
Sep 28 12:36:33 nativespace-cdp sshd[31316]: Connection closed by 159.100.136.21 port 53450 [preauth]
Sep 28 12:41:35 nativespace-cdp sshd[32310]: Connection closed by 159.100.136.21 port 34560 [preauth]
Sep 28 12:46:33 nativespace-cdp sshd[1120]: Connection closed by 159.100.136.21 port 44188 [preauth]
Sep 28 12:51:35 nativespace-cdp sshd[2241]: Connection closed by 159.100.136.21 port 53910 [preauth]
Sep 28 12:56:33 nativespace-cdp sshd[3148]: Connection closed by 159.100.136.21 port 35432 [preauth]
Sep 28 13:01:35 nativespace-cdp sshd[4563]: Connection closed by 159.100.136.21 port 44870 [preauth]
Sep 28 13:06:35 nativespace-cdp sshd[5596]: Connection closed by 159.100.136.21 port 54826 [preauth]
Sep 28 13:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 13:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:22 nativespace-cdp sudo[6034]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 13:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:22 nativespace-cdp sudo[6037]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 13:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:23 nativespace-cdp sudo[6041]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 13:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:23 nativespace-cdp sudo[6047]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 13:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:26 nativespace-cdp sudo[6050]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 13:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:26 nativespace-cdp sudo[6061]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 13:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:26 nativespace-cdp sudo[6065]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 13:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:26 nativespace-cdp sudo[6069]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 13:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:26 nativespace-cdp sudo[6072]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 13:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:26 nativespace-cdp sudo[6076]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 13:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:26 nativespace-cdp sudo[6080]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 13:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:28 nativespace-cdp sudo[6091]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 13:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:29 nativespace-cdp sudo[6095]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstred user-2=highlegh user-3=southlon user-4=firstrel user-5=clarkass user-6=costestimatorco user-7=coursemc user-8=opaiscyx user-9=ultbcrra user-10=seftvta user-11=jonhartl user-12=firstres user-13=connectedshoppin user-14=thqkgnbz user-15=accooper user-16=ianrayne user-17=hubmaster user-18=fetch user-19=carsinyo user-20=milloyco user-21=gilpin user-22=elecleis user-23=newstoda user-24=belle user-25=ggaaorgu user-26=bemadonn user-27=bedfords user-28=vivienn1 user-29=firstre2 user-30=oneoarco user-31=battlere user-32=nstriton user-33=brighto1 user-34=nativene user-35=innovat1 user-36=stuartge user-37=askhform user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=vantagep user-42=athenare user-43=connect9 user-44=lbscrmod user-45=maflemin user-46=foundation user-47=booff user-48=markward
Sep 28 13:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=stephani user-50=leereyn1 user-51=agproduc user-52=still user-53=spectrum user-54=theblack user-55=hodgesonweb user-56=jarvisin user-57=megacards user-58=musorguk user-59=wilsonsw user-60=strathar user-61=atestord user-62=sarafoundation user-63=brmrjxl user-64=lakesan1 user-65=magichat user-66=hhdugcor user-67=lbhyisi user-68=dickemery123 user-69=ptkxhsbt user-70=martsblo user-71=david user-72=careers user-73=nbhavers user-74=chrisdal user-75=mcdermos user-76=jennimil user-77=tomandle user-78=romaldki user-79=hodgsonmail user-80=outdoorc user-81=ranxterc user-82=branko user-83=onlycont user-84=lucy user-85=attlebor user-86=bakery user-87=crrtipdl user-88=sosevalu user-89=boldover user-90=nove user-91=design user-92=stagingerris user-93=dancinggardener user-94=ladburyp user-95=kategilpin user-96=havantho user-97=cath user-98=sketchy user-99=nvihkvu user-100=oubpgvbx user-101=tstardom user-102=what
Sep 28 13:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=steve user-104=bwppodcast user-105=zebrapho user-106=sibtoncc user-107=asandcoc user-108=dhyana user-109=beauty user-110=darkstar user-111=eatspam user-112=nsceres user-113=fawcettd user-114=burydropin user-115=nomistakes user-116=hidden user-117=tigerlet user-118=barbersh user-119=smrszyqg user-120=isleofwi user-121=lkpier user-122=firstre5 user-123=steakbridieme user-124=donnychicago user-125=philmcph user-126=ctedorgu user-127=nscdp user-128=foods user-129=leftie user-130=health2045 user-131=fortunaz user-132=eugincou user-133=courseme user-134=hirefootballgame user-135=cwsocial user-136=pugwash user-137=paulmca1 user-138=howardon user-139=cambria1 user-140=cathski user-141=ninejimm user-142=reliable feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 13:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 13:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:30 nativespace-cdp sudo[6100]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 13:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:30 nativespace-cdp sudo[6110]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-B9kOU2kCOo0v0ft8.~
Sep 28 13:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:30 nativespace-cdp sudo[6113]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-B9kOU2kCOo0v0ft8.~'
Sep 28 13:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:30 nativespace-cdp sudo[6116]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-B9kOU2kCOo0v0ft8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 13:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:31 nativespace-cdp sudo[6120]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 13:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:31 nativespace-cdp sudo[6123]: pam_unix(sudo:session): session closed for user root
Sep 28 13:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 13:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 13:09:43 nativespace-cdp sudo[6161]: pam_unix(sudo:session): session closed for user root
Sep 28 13:11:37 nativespace-cdp sshd[6699]: Connection closed by 159.100.136.21 port 36072 [preauth]
Sep 28 13:16:33 nativespace-cdp sshd[8204]: Connection closed by 159.100.136.21 port 45722 [preauth]
Sep 28 13:17:51 nativespace-cdp sshd[8394]: Invalid user ubuntu from 82.207.8.154 port 23856
Sep 28 13:17:51 nativespace-cdp sshd[8394]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 13:17:52 nativespace-cdp sshd[8394]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 13:17:52 nativespace-cdp sshd[8394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.207.8.154
Sep 28 13:17:54 nativespace-cdp sshd[8394]: Failed password for invalid user ubuntu from 82.207.8.154 port 23856 ssh2
Sep 28 13:17:55 nativespace-cdp sshd[8394]: Received disconnect from 82.207.8.154 port 23856:11: Bye Bye [preauth]
Sep 28 13:17:55 nativespace-cdp sshd[8394]: Disconnected from 82.207.8.154 port 23856 [preauth]
Sep 28 13:21:34 nativespace-cdp sshd[9771]: Connection closed by 159.100.136.21 port 55286 [preauth]
Sep 28 13:24:19 nativespace-cdp sshd[10777]: Invalid user user from 82.207.8.154 port 54293
Sep 28 13:24:19 nativespace-cdp sshd[10777]: input_userauth_request: invalid user user [preauth]
Sep 28 13:24:19 nativespace-cdp sshd[10777]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 13:24:19 nativespace-cdp sshd[10777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.207.8.154
Sep 28 13:24:21 nativespace-cdp sshd[10777]: Failed password for invalid user user from 82.207.8.154 port 54293 ssh2
Sep 28 13:24:21 nativespace-cdp sshd[10777]: Received disconnect from 82.207.8.154 port 54293:11: Bye Bye [preauth]
Sep 28 13:24:21 nativespace-cdp sshd[10777]: Disconnected from 82.207.8.154 port 54293 [preauth]
Sep 28 13:25:02 nativespace-cdp sshd[10986]: Invalid user odoo from 82.207.8.154 port 60492
Sep 28 13:25:02 nativespace-cdp sshd[10986]: input_userauth_request: invalid user odoo [preauth]
Sep 28 13:25:02 nativespace-cdp sshd[10986]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 13:25:02 nativespace-cdp sshd[10986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.207.8.154
Sep 28 13:25:04 nativespace-cdp sshd[10986]: Failed password for invalid user odoo from 82.207.8.154 port 60492 ssh2
Sep 28 13:25:04 nativespace-cdp sshd[10986]: Received disconnect from 82.207.8.154 port 60492:11: Bye Bye [preauth]
Sep 28 13:25:04 nativespace-cdp sshd[10986]: Disconnected from 82.207.8.154 port 60492 [preauth]
Sep 28 13:26:37 nativespace-cdp sshd[11783]: Connection closed by 159.100.136.21 port 37064 [preauth]
Sep 28 13:31:36 nativespace-cdp sshd[14225]: Connection closed by 159.100.136.21 port 46714 [preauth]
Sep 28 13:36:33 nativespace-cdp sshd[17030]: Connection closed by 159.100.136.21 port 56730 [preauth]
Sep 28 13:36:57 nativespace-cdp sshd[17180]: Did not receive identification string from 167.94.146.52 port 55718
Sep 28 13:37:15 nativespace-cdp sshd[17236]: Connection closed by 167.94.146.52 port 37536 [preauth]
Sep 28 13:41:33 nativespace-cdp sshd[19740]: Connection closed by 159.100.136.21 port 38202 [preauth]
Sep 28 13:46:33 nativespace-cdp sshd[20977]: Connection closed by 159.100.136.21 port 48174 [preauth]
Sep 28 13:51:33 nativespace-cdp sshd[22026]: Connection closed by 159.100.136.21 port 57758 [preauth]
Sep 28 13:56:33 nativespace-cdp sshd[23294]: Connection closed by 159.100.136.21 port 39254 [preauth]
Sep 28 14:01:33 nativespace-cdp sshd[24627]: Connection closed by 159.100.136.21 port 48502 [preauth]
Sep 28 14:06:36 nativespace-cdp sshd[25607]: Connection closed by 159.100.136.21 port 58518 [preauth]
Sep 28 14:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 14:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:36 nativespace-cdp sudo[26065]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 14:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:36 nativespace-cdp sudo[26069]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 14:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:38 nativespace-cdp sudo[26072]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:38 nativespace-cdp sudo[26078]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:42 nativespace-cdp sudo[26081]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 14:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:42 nativespace-cdp sudo[26093]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 14:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:42 nativespace-cdp sudo[26097]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 14:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:42 nativespace-cdp sudo[26100]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 14:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:42 nativespace-cdp sudo[26103]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 14:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:42 nativespace-cdp sudo[26106]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 14:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:42 nativespace-cdp sudo[26110]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 14:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:50 nativespace-cdp sudo[26134]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 14:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:51 nativespace-cdp sudo[26140]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nsceres user-2=fawcettd user-3=burydropin user-4=dhyana user-5=beauty user-6=darkstar user-7=eatspam user-8=sibtoncc user-9=asandcoc user-10=steve user-11=bwppodcast user-12=zebrapho user-13=cwsocial user-14=howardon user-15=pugwash user-16=paulmca1 user-17=cathski user-18=cambria1 user-19=reliable user-20=ninejimm user-21=eugincou user-22=courseme user-23=hirefootballgame user-24=lkpier user-25=firstre5 user-26=steakbridieme user-27=donnychicago user-28=philmcph user-29=ctedorgu user-30=nscdp user-31=leftie user-32=foods user-33=fortunaz user-34=health2045 user-35=nomistakes user-36=hidden user-37=barbersh user-38=tigerlet user-39=smrszyqg user-40=isleofwi user-41=onlycont user-42=lucy user-43=attlebor user-44=romaldki user-45=outdoorc user-46=hodgsonmail user-47=ranxterc user-48=branko
Sep 28 14:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jennimil user-50=tomandle user-51=david user-52=careers user-53=nbhavers user-54=chrisdal user-55=mcdermos user-56=havantho user-57=cath user-58=sketchy user-59=nvihkvu user-60=tstardom user-61=oubpgvbx user-62=what user-63=design user-64=stagingerris user-65=dancinggardener user-66=ladburyp user-67=kategilpin user-68=boldover user-69=nove user-70=bakery user-71=crrtipdl user-72=sosevalu user-73=spectrum user-74=hodgesonweb user-75=theblack user-76=jarvisin user-77=stephani user-78=leereyn1 user-79=agproduc user-80=still user-81=vantagep user-82=connect9 user-83=athenare user-84=lbscrmod user-85=maflemin user-86=foundation user-87=booff user-88=markward user-89=ulsukarm user-90=dickemery123 user-91=ptkxhsbt user-92=martsblo user-93=magichat user-94=hhdugcor user-95=lbhyisi user-96=strathar user-97=atestord user-98=sarafoundation user-99=brmrjxl user-100=lakesan1 user-101=megacards user-102=musorguk
Sep 28 14:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=wilsonsw user-104=hubmaster user-105=fetch user-106=carsinyo user-107=milloyco user-108=gilpin user-109=elecleis user-110=connectedshoppin user-111=thqkgnbz user-112=accooper user-113=ianrayne user-114=coursemc user-115=opaiscyx user-116=ultbcrra user-117=jonhartl user-118=seftvta user-119=firstres user-120=firstred user-121=highlegh user-122=southlon user-123=clarkass user-124=firstrel user-125=costestimatorco user-126=skyfirec user-127=alexadmin user-128=nativene user-129=innovat1 user-130=askhform user-131=stuartge user-132=vivienn1 user-133=firstre2 user-134=oneoarco user-135=battlere user-136=nstriton user-137=brighto1 user-138=newstoda user-139=ggaaorgu user-140=belle user-141=bemadonn user-142=bedfords feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 14:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 14:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:52 nativespace-cdp sudo[26146]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:53 nativespace-cdp sudo[26154]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MrV4COEsv3hSM7w4.~
Sep 28 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:53 nativespace-cdp sudo[26158]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MrV4COEsv3hSM7w4.~'
Sep 28 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:53 nativespace-cdp sudo[26161]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MrV4COEsv3hSM7w4.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:53 nativespace-cdp sudo[26165]: pam_unix(sudo:session): session closed for user root
Sep 28 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:09:53 nativespace-cdp sudo[26168]: pam_unix(sudo:session): session closed for user root
Sep 28 14:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 14:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 14:10:13 nativespace-cdp sudo[26347]: pam_unix(sudo:session): session closed for user root
Sep 28 14:11:33 nativespace-cdp sshd[26646]: Connection closed by 159.100.136.21 port 39530 [preauth]
Sep 28 14:16:33 nativespace-cdp sshd[27869]: Connection closed by 159.100.136.21 port 49060 [preauth]
Sep 28 14:21:33 nativespace-cdp sshd[28852]: Connection closed by 159.100.136.21 port 57660 [preauth]
Sep 28 14:26:33 nativespace-cdp sshd[29815]: Connection closed by 159.100.136.21 port 38556 [preauth]
Sep 28 14:31:34 nativespace-cdp sshd[31179]: Connection closed by 159.100.136.21 port 47098 [preauth]
Sep 28 14:36:33 nativespace-cdp sshd[32204]: Connection closed by 159.100.136.21 port 56722 [preauth]
Sep 28 14:41:33 nativespace-cdp sshd[837]: Connection closed by 159.100.136.21 port 37806 [preauth]
Sep 28 14:46:34 nativespace-cdp sshd[2066]: Connection closed by 159.100.136.21 port 47628 [preauth]
Sep 28 14:51:33 nativespace-cdp sshd[3379]: Connection closed by 159.100.136.21 port 57308 [preauth]
Sep 28 14:56:36 nativespace-cdp sshd[4448]: Connection closed by 159.100.136.21 port 38622 [preauth]
Sep 28 15:01:33 nativespace-cdp sshd[5915]: Connection closed by 159.100.136.21 port 48150 [preauth]
Sep 28 15:06:36 nativespace-cdp sshd[7021]: Connection closed by 159.100.136.21 port 58112 [preauth]
Sep 28 15:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 15:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:29 nativespace-cdp sudo[7446]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 15:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:29 nativespace-cdp sudo[7450]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 15:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:31 nativespace-cdp sudo[7453]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:31 nativespace-cdp sudo[7459]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:35 nativespace-cdp sudo[7463]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 15:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:35 nativespace-cdp sudo[7473]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 15:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:35 nativespace-cdp sudo[7477]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 15:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:35 nativespace-cdp sudo[7480]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 15:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:35 nativespace-cdp sudo[7483]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 15:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:35 nativespace-cdp sudo[7486]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 15:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:35 nativespace-cdp sudo[7489]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 15:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:37 nativespace-cdp sudo[7500]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 15:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:38 nativespace-cdp sudo[7505]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=david user-2=nbhavers user-3=careers user-4=chrisdal user-5=mcdermos user-6=jennimil user-7=tomandle user-8=romaldki user-9=outdoorc user-10=hodgsonmail user-11=ranxterc user-12=branko user-13=onlycont user-14=lucy user-15=attlebor user-16=bakery user-17=crrtipdl user-18=sosevalu user-19=boldover user-20=nove user-21=design user-22=stagingerris user-23=dancinggardener user-24=ladburyp user-25=kategilpin user-26=havantho user-27=sketchy user-28=cath user-29=nvihkvu user-30=oubpgvbx user-31=tstardom user-32=what user-33=steve user-34=bwppodcast user-35=zebrapho user-36=sibtoncc user-37=asandcoc user-38=dhyana user-39=beauty user-40=darkstar user-41=eatspam user-42=nsceres user-43=fawcettd user-44=burydropin user-45=nomistakes user-46=hidden user-47=tigerlet user-48=barbersh user-49=smrszyqg
Sep 28 15:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=isleofwi user-51=lkpier user-52=donnychicago user-53=firstre5 user-54=steakbridieme user-55=philmcph user-56=ctedorgu user-57=nscdp user-58=leftie user-59=foods user-60=fortunaz user-61=health2045 user-62=eugincou user-63=courseme user-64=hirefootballgame user-65=cwsocial user-66=howardon user-67=pugwash user-68=paulmca1 user-69=cathski user-70=cambria1 user-71=reliable user-72=ninejimm user-73=firstred user-74=highlegh user-75=southlon user-76=clarkass user-77=firstrel user-78=costestimatorco user-79=coursemc user-80=opaiscyx user-81=ultbcrra user-82=seftvta user-83=jonhartl user-84=firstres user-85=connectedshoppin user-86=thqkgnbz user-87=accooper user-88=ianrayne user-89=hubmaster user-90=fetch user-91=carsinyo user-92=milloyco user-93=gilpin user-94=elecleis user-95=newstoda user-96=ggaaorgu user-97=belle user-98=bemadonn user-99=bedfords user-100=vivienn1 user-101=firstre2 user-102=oneoarco
Sep 28 15:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=battlere user-104=nstriton user-105=brighto1 user-106=nativene user-107=innovat1 user-108=askhform user-109=stuartge user-110=alexadmin user-111=skyfirec user-112=ulsukarm user-113=vantagep user-114=athenare user-115=connect9 user-116=lbscrmod user-117=maflemin user-118=markward user-119=booff user-120=foundation user-121=stephani user-122=leereyn1 user-123=agproduc user-124=still user-125=spectrum user-126=theblack user-127=hodgesonweb user-128=jarvisin user-129=megacards user-130=musorguk user-131=wilsonsw user-132=strathar user-133=atestord user-134=sarafoundation user-135=brmrjxl user-136=lakesan1 user-137=magichat user-138=hhdugcor user-139=lbhyisi user-140=dickemery123 user-141=ptkxhsbt user-142=martsblo feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 15:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 15:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:40 nativespace-cdp sudo[7512]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 15:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:40 nativespace-cdp sudo[7519]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4Hq7S0gWWSzNOh2j.~
Sep 28 15:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:40 nativespace-cdp sudo[7523]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4Hq7S0gWWSzNOh2j.~'
Sep 28 15:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:40 nativespace-cdp sudo[7526]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4Hq7S0gWWSzNOh2j.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 15:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:40 nativespace-cdp sudo[7530]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 15:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:40 nativespace-cdp sudo[7533]: pam_unix(sudo:session): session closed for user root
Sep 28 15:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 15:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 15:09:42 nativespace-cdp sudo[7555]: pam_unix(sudo:session): session closed for user root
Sep 28 15:11:33 nativespace-cdp sshd[8042]: Connection closed by 159.100.136.21 port 39376 [preauth]
Sep 28 15:16:33 nativespace-cdp sshd[9319]: Connection closed by 159.100.136.21 port 48920 [preauth]
Sep 28 15:21:35 nativespace-cdp sshd[10327]: Connection closed by 159.100.136.21 port 58242 [preauth]
Sep 28 15:26:00 nativespace-cdp sshd[11186]: Did not receive identification string from 87.236.176.55 port 45237
Sep 28 15:26:00 nativespace-cdp sshd[11190]: Connection closed by 87.236.176.55 port 32871 [preauth]
Sep 28 15:26:33 nativespace-cdp sshd[11310]: Connection closed by 159.100.136.21 port 39550 [preauth]
Sep 28 15:31:35 nativespace-cdp sshd[12658]: Connection closed by 159.100.136.21 port 48448 [preauth]
Sep 28 15:36:33 nativespace-cdp sshd[13605]: Connection closed by 159.100.136.21 port 57720 [preauth]
Sep 28 15:41:10 nativespace-cdp sshd[14513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.88.232.183  user=root
Sep 28 15:41:10 nativespace-cdp sshd[14513]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 15:41:12 nativespace-cdp sshd[14513]: Failed password for root from 183.88.232.183 port 34256 ssh2
Sep 28 15:41:13 nativespace-cdp sshd[14513]: Received disconnect from 183.88.232.183 port 34256:11: Bye Bye [preauth]
Sep 28 15:41:13 nativespace-cdp sshd[14513]: Disconnected from 183.88.232.183 port 34256 [preauth]
Sep 28 15:41:20 nativespace-cdp sshd[14546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.254.115.235  user=root
Sep 28 15:41:20 nativespace-cdp sshd[14546]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 15:41:22 nativespace-cdp sshd[14546]: Failed password for root from 156.254.115.235 port 59918 ssh2
Sep 28 15:41:23 nativespace-cdp sshd[14546]: Received disconnect from 156.254.115.235 port 59918:11: Bye Bye [preauth]
Sep 28 15:41:23 nativespace-cdp sshd[14546]: Disconnected from 156.254.115.235 port 59918 [preauth]
Sep 28 15:41:35 nativespace-cdp sshd[14627]: Connection closed by 159.100.136.21 port 38604 [preauth]
Sep 28 15:43:33 nativespace-cdp sshd[15024]: Invalid user superman from 201.186.40.250 port 54750
Sep 28 15:43:33 nativespace-cdp sshd[15024]: input_userauth_request: invalid user superman [preauth]
Sep 28 15:43:33 nativespace-cdp sshd[15024]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 15:43:33 nativespace-cdp sshd[15024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.186.40.250
Sep 28 15:43:35 nativespace-cdp sshd[15024]: Failed password for invalid user superman from 201.186.40.250 port 54750 ssh2
Sep 28 15:43:35 nativespace-cdp sshd[15024]: Received disconnect from 201.186.40.250 port 54750:11: Bye Bye [preauth]
Sep 28 15:43:35 nativespace-cdp sshd[15024]: Disconnected from 201.186.40.250 port 54750 [preauth]
Sep 28 15:43:36 nativespace-cdp sshd[15036]: Invalid user ubuntu from 156.254.115.235 port 36980
Sep 28 15:43:36 nativespace-cdp sshd[15036]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 15:43:36 nativespace-cdp sshd[15036]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 15:43:36 nativespace-cdp sshd[15036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.254.115.235
Sep 28 15:43:39 nativespace-cdp sshd[15036]: Failed password for invalid user ubuntu from 156.254.115.235 port 36980 ssh2
Sep 28 15:43:39 nativespace-cdp sshd[15036]: Received disconnect from 156.254.115.235 port 36980:11: Bye Bye [preauth]
Sep 28 15:43:39 nativespace-cdp sshd[15036]: Disconnected from 156.254.115.235 port 36980 [preauth]
Sep 28 15:44:26 nativespace-cdp sshd[15349]: Invalid user admin from 156.254.115.235 port 61958
Sep 28 15:44:26 nativespace-cdp sshd[15349]: input_userauth_request: invalid user admin [preauth]
Sep 28 15:44:26 nativespace-cdp sshd[15349]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 15:44:26 nativespace-cdp sshd[15349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.254.115.235
Sep 28 15:44:28 nativespace-cdp sshd[15349]: Failed password for invalid user admin from 156.254.115.235 port 61958 ssh2
Sep 28 15:45:46 nativespace-cdp sshd[15667]: Invalid user postgres from 183.88.232.183 port 52234
Sep 28 15:45:46 nativespace-cdp sshd[15667]: input_userauth_request: invalid user postgres [preauth]
Sep 28 15:45:46 nativespace-cdp sshd[15667]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 15:45:46 nativespace-cdp sshd[15667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.88.232.183
Sep 28 15:45:48 nativespace-cdp sshd[15667]: Failed password for invalid user postgres from 183.88.232.183 port 52234 ssh2
Sep 28 15:45:48 nativespace-cdp sshd[15667]: Received disconnect from 183.88.232.183 port 52234:11: Bye Bye [preauth]
Sep 28 15:45:48 nativespace-cdp sshd[15667]: Disconnected from 183.88.232.183 port 52234 [preauth]
Sep 28 15:46:03 nativespace-cdp sshd[15732]: Invalid user test from 154.29.144.122 port 42644
Sep 28 15:46:03 nativespace-cdp sshd[15732]: input_userauth_request: invalid user test [preauth]
Sep 28 15:46:03 nativespace-cdp sshd[15732]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 15:46:03 nativespace-cdp sshd[15732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.29.144.122
Sep 28 15:46:05 nativespace-cdp sshd[15732]: Failed password for invalid user test from 154.29.144.122 port 42644 ssh2
Sep 28 15:46:05 nativespace-cdp sshd[15732]: Received disconnect from 154.29.144.122 port 42644:11: Bye Bye [preauth]
Sep 28 15:46:05 nativespace-cdp sshd[15732]: Disconnected from 154.29.144.122 port 42644 [preauth]
Sep 28 15:46:34 nativespace-cdp sshd[15917]: Connection closed by 159.100.136.21 port 48196 [preauth]
Sep 28 15:46:40 nativespace-cdp sshd[15926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.88.232.183  user=root
Sep 28 15:46:40 nativespace-cdp sshd[15926]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 15:46:42 nativespace-cdp sshd[15926]: Failed password for root from 183.88.232.183 port 38708 ssh2
Sep 28 15:46:42 nativespace-cdp sshd[15926]: Received disconnect from 183.88.232.183 port 38708:11: Bye Bye [preauth]
Sep 28 15:46:42 nativespace-cdp sshd[15926]: Disconnected from 183.88.232.183 port 38708 [preauth]
Sep 28 15:47:15 nativespace-cdp sshd[16120]: Invalid user tg from 154.29.144.122 port 60282
Sep 28 15:47:15 nativespace-cdp sshd[16120]: input_userauth_request: invalid user tg [preauth]
Sep 28 15:47:15 nativespace-cdp sshd[16120]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 15:47:15 nativespace-cdp sshd[16120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.29.144.122
Sep 28 15:47:17 nativespace-cdp sshd[16120]: Failed password for invalid user tg from 154.29.144.122 port 60282 ssh2
Sep 28 15:47:17 nativespace-cdp sshd[16120]: Received disconnect from 154.29.144.122 port 60282:11: Bye Bye [preauth]
Sep 28 15:47:17 nativespace-cdp sshd[16120]: Disconnected from 154.29.144.122 port 60282 [preauth]
Sep 28 15:47:30 nativespace-cdp sshd[16157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.186.40.250  user=root
Sep 28 15:47:30 nativespace-cdp sshd[16157]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 15:47:32 nativespace-cdp sshd[16157]: Failed password for root from 201.186.40.250 port 36968 ssh2
Sep 28 15:47:34 nativespace-cdp sshd[16157]: Received disconnect from 201.186.40.250 port 36968:11: Bye Bye [preauth]
Sep 28 15:47:34 nativespace-cdp sshd[16157]: Disconnected from 201.186.40.250 port 36968 [preauth]
Sep 28 15:47:54 nativespace-cdp sshd[16215]: Invalid user test from 154.29.144.122 port 45064
Sep 28 15:47:54 nativespace-cdp sshd[16215]: input_userauth_request: invalid user test [preauth]
Sep 28 15:47:54 nativespace-cdp sshd[16215]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 15:47:54 nativespace-cdp sshd[16215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.29.144.122
Sep 28 15:47:56 nativespace-cdp sshd[16215]: Failed password for invalid user test from 154.29.144.122 port 45064 ssh2
Sep 28 15:47:56 nativespace-cdp sshd[16215]: Received disconnect from 154.29.144.122 port 45064:11: Bye Bye [preauth]
Sep 28 15:47:56 nativespace-cdp sshd[16215]: Disconnected from 154.29.144.122 port 45064 [preauth]
Sep 28 15:48:22 nativespace-cdp sshd[16297]: Invalid user test_user from 201.186.40.250 port 49510
Sep 28 15:48:22 nativespace-cdp sshd[16297]: input_userauth_request: invalid user test_user [preauth]
Sep 28 15:48:22 nativespace-cdp sshd[16297]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 15:48:22 nativespace-cdp sshd[16297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.186.40.250
Sep 28 15:48:24 nativespace-cdp sshd[16297]: Failed password for invalid user test_user from 201.186.40.250 port 49510 ssh2
Sep 28 15:48:24 nativespace-cdp sshd[16297]: Received disconnect from 201.186.40.250 port 49510:11: Bye Bye [preauth]
Sep 28 15:48:24 nativespace-cdp sshd[16297]: Disconnected from 201.186.40.250 port 49510 [preauth]
Sep 28 15:56:34 nativespace-cdp sshd[18054]: Connection closed by 159.100.136.21 port 39098 [preauth]
Sep 28 16:01:35 nativespace-cdp sshd[19517]: Connection closed by 159.100.136.21 port 48550 [preauth]
Sep 28 16:06:35 nativespace-cdp sshd[20616]: Connection closed by 159.100.136.21 port 58338 [preauth]
Sep 28 16:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 16:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:21 nativespace-cdp sudo[21119]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 16:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:21 nativespace-cdp sudo[21122]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 16:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:23 nativespace-cdp sudo[21125]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:23 nativespace-cdp sudo[21138]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:26 nativespace-cdp sudo[21142]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:27 nativespace-cdp sudo[21153]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:27 nativespace-cdp sudo[21156]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:27 nativespace-cdp sudo[21159]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:27 nativespace-cdp sudo[21162]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:27 nativespace-cdp sudo[21165]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:27 nativespace-cdp sudo[21169]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 16:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:29 nativespace-cdp sudo[21180]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 16:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:29 nativespace-cdp sudo[21184]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=maflemin user-3=lbscrmod user-4=athenare user-5=connect9 user-6=vantagep user-7=markward user-8=booff user-9=foundation user-10=leereyn1 user-11=stephani user-12=still user-13=agproduc user-14=hodgesonweb user-15=theblack user-16=spectrum user-17=jarvisin user-18=musorguk user-19=megacards user-20=wilsonsw user-21=sarafoundation user-22=atestord user-23=strathar user-24=lakesan1 user-25=brmrjxl user-26=magichat user-27=lbhyisi user-28=hhdugcor user-29=ptkxhsbt user-30=dickemery123 user-31=martsblo user-32=southlon user-33=highlegh user-34=firstred user-35=costestimatorco user-36=clarkass user-37=firstrel user-38=opaiscyx user-39=coursemc user-40=firstres user-41=jonhartl user-42=seftvta user-43=ultbcrra user-44=thqkgnbz user-45=connectedshoppin user-46=ianrayne user-47=accooper
Sep 28 16:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=carsinyo user-49=fetch user-50=hubmaster user-51=elecleis user-52=gilpin user-53=milloyco user-54=bemadonn user-55=belle user-56=ggaaorgu user-57=newstoda user-58=bedfords user-59=battlere user-60=oneoarco user-61=firstre2 user-62=vivienn1 user-63=brighto1 user-64=nstriton user-65=nativene user-66=stuartge user-67=askhform user-68=innovat1 user-69=alexadmin user-70=skyfirec user-71=steve user-72=zebrapho user-73=bwppodcast user-74=sibtoncc user-75=asandcoc user-76=dhyana user-77=eatspam user-78=darkstar user-79=beauty user-80=nsceres user-81=burydropin user-82=fawcettd user-83=tigerlet user-84=barbersh user-85=hidden user-86=nomistakes user-87=isleofwi user-88=smrszyqg user-89=ctedorgu user-90=philmcph user-91=donnychicago user-92=firstre5 user-93=steakbridieme user-94=lkpier user-95=health2045 user-96=fortunaz user-97=leftie user-98=foods user-99=nscdp user-100=courseme user-101=eugincou
Sep 28 16:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hirefootballgame user-103=pugwash user-104=howardon user-105=paulmca1 user-106=cwsocial user-107=reliable user-108=ninejimm user-109=cambria1 user-110=cathski user-111=nbhavers user-112=careers user-113=david user-114=mcdermos user-115=chrisdal user-116=jennimil user-117=tomandle user-118=romaldki user-119=branko user-120=ranxterc user-121=hodgsonmail user-122=outdoorc user-123=onlycont user-124=attlebor user-125=lucy user-126=sosevalu user-127=crrtipdl user-128=bakery user-129=boldover user-130=nove user-131=design user-132=kategilpin user-133=ladburyp user-134=dancinggardener user-135=stagingerris user-136=nvihkvu user-137=cath user-138=sketchy user-139=havantho user-140=what user-141=oubpgvbx user-142=tstardom feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 28 16:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 16:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:31 nativespace-cdp sudo[21189]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 16:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:31 nativespace-cdp sudo[21195]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JqQ5yeE5yo0ugH5P.~
Sep 28 16:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:31 nativespace-cdp sudo[21198]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JqQ5yeE5yo0ugH5P.~'
Sep 28 16:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:31 nativespace-cdp sudo[21201]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JqQ5yeE5yo0ugH5P.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 16:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:31 nativespace-cdp sudo[21205]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 16:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:31 nativespace-cdp sudo[21208]: pam_unix(sudo:session): session closed for user root
Sep 28 16:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 16:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 16:09:38 nativespace-cdp sudo[21242]: pam_unix(sudo:session): session closed for user root
Sep 28 16:11:33 nativespace-cdp sshd[21701]: Connection closed by 159.100.136.21 port 39510 [preauth]
Sep 28 16:16:33 nativespace-cdp sshd[23162]: Connection closed by 159.100.136.21 port 49236 [preauth]
Sep 28 16:21:33 nativespace-cdp sshd[24161]: Connection closed by 159.100.136.21 port 58702 [preauth]
Sep 28 16:26:36 nativespace-cdp sshd[25154]: Connection closed by 159.100.136.21 port 40326 [preauth]
Sep 28 16:31:34 nativespace-cdp sshd[26470]: Connection closed by 159.100.136.21 port 50018 [preauth]
Sep 28 16:36:34 nativespace-cdp sshd[27414]: Connection closed by 159.100.136.21 port 59882 [preauth]
Sep 28 16:41:33 nativespace-cdp sshd[28417]: Connection closed by 159.100.136.21 port 41002 [preauth]
Sep 28 16:46:33 nativespace-cdp sshd[29768]: Connection closed by 159.100.136.21 port 50776 [preauth]
Sep 28 16:51:33 nativespace-cdp sshd[31150]: Connection closed by 159.100.136.21 port 60314 [preauth]
Sep 28 16:56:33 nativespace-cdp sshd[32066]: Connection closed by 159.100.136.21 port 41944 [preauth]
Sep 28 17:01:33 nativespace-cdp sshd[1093]: Connection closed by 159.100.136.21 port 51792 [preauth]
Sep 28 17:06:33 nativespace-cdp sshd[2217]: Connection closed by 159.100.136.21 port 33570 [preauth]
Sep 28 17:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 17:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:30 nativespace-cdp sudo[2827]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 17:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:30 nativespace-cdp sudo[2830]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 17:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:31 nativespace-cdp sudo[2835]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 17:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:31 nativespace-cdp sudo[2841]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 17:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:47 nativespace-cdp sudo[2844]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 17:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:47 nativespace-cdp sudo[2894]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 17:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:47 nativespace-cdp sudo[2897]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 17:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:47 nativespace-cdp sudo[2900]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 17:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:47 nativespace-cdp sudo[2904]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 17:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:47 nativespace-cdp sudo[2907]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 17:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:47 nativespace-cdp sudo[2910]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 17:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:52 nativespace-cdp sudo[2927]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 17:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:55 nativespace-cdp sudo[2932]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=attlebor user-2=lucy user-3=onlycont user-4=branko user-5=hodgsonmail user-6=ranxterc user-7=outdoorc user-8=romaldki user-9=tomandle user-10=jennimil user-11=mcdermos user-12=chrisdal user-13=nbhavers user-14=careers user-15=david user-16=what user-17=oubpgvbx user-18=tstardom user-19=nvihkvu user-20=sketchy user-21=cath user-22=havantho user-23=kategilpin user-24=ladburyp user-25=stagingerris user-26=dancinggardener user-27=design user-28=nove user-29=boldover user-30=sosevalu user-31=crrtipdl user-32=bakery user-33=burydropin user-34=fawcettd user-35=nsceres user-36=eatspam user-37=darkstar user-38=beauty user-39=dhyana user-40=sibtoncc user-41=asandcoc user-42=zebrapho user-43=bwppodcast user-44=steve user-45=reliable user-46=ninejimm user-47=cambria1 user-48=cathski user-49=howardon
Sep 28 17:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=paulmca1 user-51=pugwash user-52=cwsocial user-53=hirefootballgame user-54=courseme user-55=eugincou user-56=fortunaz user-57=health2045 user-58=leftie user-59=foods user-60=nscdp user-61=ctedorgu user-62=philmcph user-63=donnychicago user-64=firstre5 user-65=steakbridieme user-66=lkpier user-67=isleofwi user-68=smrszyqg user-69=tigerlet user-70=barbersh user-71=hidden user-72=nomistakes user-73=elecleis user-74=milloyco user-75=gilpin user-76=carsinyo user-77=fetch user-78=hubmaster user-79=ianrayne user-80=accooper user-81=thqkgnbz user-82=connectedshoppin user-83=firstres user-84=jonhartl user-85=seftvta user-86=ultbcrra user-87=opaiscyx user-88=coursemc user-89=costestimatorco user-90=clarkass user-91=firstrel user-92=southlon user-93=highlegh user-94=firstred user-95=skyfirec user-96=alexadmin user-97=askhform user-98=stuartge user-99=innovat1 user-100=nativene user-101=brighto1 user-102=nstriton
Sep 28 17:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=battlere user-104=oneoarco user-105=firstre2 user-106=vivienn1 user-107=bedfords user-108=bemadonn user-109=belle user-110=ggaaorgu user-111=newstoda user-112=jarvisin user-113=hodgesonweb user-114=theblack user-115=spectrum user-116=still user-117=agproduc user-118=leereyn1 user-119=stephani user-120=booff user-121=foundation user-122=markward user-123=maflemin user-124=lbscrmod user-125=athenare user-126=connect9 user-127=vantagep user-128=ulsukarm user-129=martsblo user-130=ptkxhsbt user-131=dickemery123 user-132=lbhyisi user-133=hhdugcor user-134=magichat user-135=lakesan1 user-136=brmrjxl user-137=sarafoundation user-138=atestord user-139=strathar user-140=wilsonsw user-141=musorguk user-142=megacards feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 17:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 17:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:57 nativespace-cdp sudo[2940]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:57 nativespace-cdp sudo[2950]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LHhBUSaWXVVKp7B7.~
Sep 28 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:57 nativespace-cdp sudo[2954]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LHhBUSaWXVVKp7B7.~'
Sep 28 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:57 nativespace-cdp sudo[2957]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LHhBUSaWXVVKp7B7.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:57 nativespace-cdp sudo[2961]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:09:57 nativespace-cdp sudo[2964]: pam_unix(sudo:session): session closed for user root
Sep 28 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 17:10:00 nativespace-cdp sudo[2984]: pam_unix(sudo:session): session closed for user root
Sep 28 17:11:34 nativespace-cdp sshd[3408]: Connection closed by 159.100.136.21 port 43098 [preauth]
Sep 28 17:16:33 nativespace-cdp sshd[4790]: Connection closed by 159.100.136.21 port 52134 [preauth]
Sep 28 17:21:33 nativespace-cdp sshd[5813]: Connection closed by 159.100.136.21 port 33388 [preauth]
Sep 28 17:26:33 nativespace-cdp sshd[6836]: Connection closed by 159.100.136.21 port 42970 [preauth]
Sep 28 17:31:33 nativespace-cdp sshd[7989]: Connection closed by 159.100.136.21 port 52080 [preauth]
Sep 28 17:36:33 nativespace-cdp sshd[9228]: Connection closed by 159.100.136.21 port 33676 [preauth]
Sep 28 17:41:35 nativespace-cdp sshd[10415]: Connection closed by 159.100.136.21 port 42974 [preauth]
Sep 28 17:46:33 nativespace-cdp sshd[11990]: Connection closed by 159.100.136.21 port 53050 [preauth]
Sep 28 17:51:36 nativespace-cdp sshd[13255]: Connection closed by 159.100.136.21 port 34236 [preauth]
Sep 28 17:56:33 nativespace-cdp sshd[14235]: Connection closed by 159.100.136.21 port 43996 [preauth]
Sep 28 18:01:33 nativespace-cdp sshd[15583]: Connection closed by 159.100.136.21 port 52774 [preauth]
Sep 28 18:06:37 nativespace-cdp sshd[16573]: Connection closed by 159.100.136.21 port 34358 [preauth]
Sep 28 18:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 18:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:16 nativespace-cdp sudo[17048]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 18:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:16 nativespace-cdp sudo[17051]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 18:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:17 nativespace-cdp sudo[17055]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 18:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:17 nativespace-cdp sudo[17060]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 18:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:21 nativespace-cdp sudo[17064]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 18:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:21 nativespace-cdp sudo[17081]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 18:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:21 nativespace-cdp sudo[17086]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 18:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:21 nativespace-cdp sudo[17089]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 18:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:21 nativespace-cdp sudo[17092]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 18:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:21 nativespace-cdp sudo[17095]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 18:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:21 nativespace-cdp sudo[17098]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:23 nativespace-cdp sudo[17111]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:23 nativespace-cdp sudo[17116]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=nativene user-4=stuartge user-5=askhform user-6=innovat1 user-7=battlere user-8=oneoarco user-9=firstre2 user-10=vivienn1 user-11=brighto1 user-12=nstriton user-13=bemadonn user-14=ggaaorgu user-15=belle user-16=newstoda user-17=bedfords user-18=carsinyo user-19=fetch user-20=hubmaster user-21=elecleis user-22=gilpin user-23=milloyco user-24=thqkgnbz user-25=connectedshoppin user-26=ianrayne user-27=accooper user-28=opaiscyx user-29=coursemc user-30=firstres user-31=jonhartl user-32=seftvta user-33=ultbcrra user-34=southlon user-35=highlegh user-36=firstred user-37=costestimatorco user-38=firstrel user-39=clarkass user-40=ptkxhsbt user-41=dickemery123 user-42=martsblo user-43=magichat user-44=lbhyisi user-45=hhdugcor user-46=sarafoundation user-47=atestord
Sep 28 18:09:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=strathar user-49=lakesan1 user-50=brmrjxl user-51=musorguk user-52=megacards user-53=wilsonsw user-54=hodgesonweb user-55=theblack user-56=spectrum user-57=jarvisin user-58=leereyn1 user-59=stephani user-60=still user-61=agproduc user-62=maflemin user-63=lbscrmod user-64=athenare user-65=connect9 user-66=vantagep user-67=booff user-68=markward user-69=foundation user-70=ulsukarm user-71=nvihkvu user-72=sketchy user-73=cath user-74=havantho user-75=what user-76=tstardom user-77=oubpgvbx user-78=design user-79=kategilpin user-80=ladburyp user-81=stagingerris user-82=dancinggardener user-83=boldover user-84=nove user-85=sosevalu user-86=crrtipdl user-87=bakery user-88=onlycont user-89=attlebor user-90=lucy user-91=romaldki user-92=branko user-93=outdoorc user-94=hodgsonmail user-95=ranxterc user-96=jennimil user-97=tomandle user-98=nbhavers user-99=careers user-100=david user-101=mcdermos user-102=chrisdal
Sep 28 18:09:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=paulmca1 user-104=pugwash user-105=howardon user-106=cwsocial user-107=reliable user-108=ninejimm user-109=cathski user-110=cambria1 user-111=courseme user-112=eugincou user-113=hirefootballgame user-114=ctedorgu user-115=philmcph user-116=firstre5 user-117=steakbridieme user-118=donnychicago user-119=lkpier user-120=fortunaz user-121=health2045 user-122=leftie user-123=foods user-124=nscdp user-125=tigerlet user-126=barbersh user-127=hidden user-128=nomistakes user-129=smrszyqg user-130=isleofwi user-131=nsceres user-132=burydropin user-133=fawcettd user-134=dhyana user-135=eatspam user-136=darkstar user-137=beauty user-138=asandcoc user-139=sibtoncc user-140=steve user-141=zebrapho user-142=bwppodcast feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 18:09:23 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:24 nativespace-cdp sudo[17122]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 18:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:24 nativespace-cdp sudo[17130]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lgHbyJOcqWdSTQJO.~
Sep 28 18:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:25 nativespace-cdp sudo[17133]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lgHbyJOcqWdSTQJO.~'
Sep 28 18:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:25 nativespace-cdp sudo[17136]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lgHbyJOcqWdSTQJO.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 18:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:25 nativespace-cdp sudo[17141]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 18:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:25 nativespace-cdp sudo[17144]: pam_unix(sudo:session): session closed for user root
Sep 28 18:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 18:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 18:09:26 nativespace-cdp sudo[17163]: pam_unix(sudo:session): session closed for user root
Sep 28 18:11:33 nativespace-cdp sshd[17604]: Connection closed by 159.100.136.21 port 43928 [preauth]
Sep 28 18:16:33 nativespace-cdp sshd[19042]: Connection closed by 159.100.136.21 port 53566 [preauth]
Sep 28 18:21:33 nativespace-cdp sshd[20056]: Connection closed by 159.100.136.21 port 35000 [preauth]
Sep 28 18:26:33 nativespace-cdp sshd[21124]: Connection closed by 159.100.136.21 port 44788 [preauth]
Sep 28 18:31:33 nativespace-cdp sshd[22497]: Connection closed by 159.100.136.21 port 54388 [preauth]
Sep 28 18:36:33 nativespace-cdp sshd[23590]: Connection closed by 159.100.136.21 port 36020 [preauth]
Sep 28 18:41:34 nativespace-cdp sshd[24574]: Connection closed by 159.100.136.21 port 45010 [preauth]
Sep 28 18:46:33 nativespace-cdp sshd[25765]: Connection closed by 159.100.136.21 port 55020 [preauth]
Sep 28 18:51:33 nativespace-cdp sshd[26822]: Connection closed by 159.100.136.21 port 36480 [preauth]
Sep 28 18:56:33 nativespace-cdp sshd[27713]: Connection closed by 159.100.136.21 port 46302 [preauth]
Sep 28 19:01:33 nativespace-cdp sshd[29079]: Connection closed by 159.100.136.21 port 54636 [preauth]
Sep 28 19:06:36 nativespace-cdp sshd[30091]: Connection closed by 159.100.136.21 port 35372 [preauth]
Sep 28 19:07:31 nativespace-cdp sshd[30215]: Invalid user test from 13.78.190.191 port 43794
Sep 28 19:07:31 nativespace-cdp sshd[30215]: input_userauth_request: invalid user test [preauth]
Sep 28 19:07:31 nativespace-cdp sshd[30215]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:07:31 nativespace-cdp sshd[30215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.78.190.191
Sep 28 19:07:33 nativespace-cdp sshd[30215]: Failed password for invalid user test from 13.78.190.191 port 43794 ssh2
Sep 28 19:07:33 nativespace-cdp sshd[30215]: Received disconnect from 13.78.190.191 port 43794:11: Bye Bye [preauth]
Sep 28 19:07:33 nativespace-cdp sshd[30215]: Disconnected from 13.78.190.191 port 43794 [preauth]
Sep 28 19:07:43 nativespace-cdp sshd[30249]: Invalid user user from 178.27.90.117 port 53600
Sep 28 19:07:43 nativespace-cdp sshd[30249]: input_userauth_request: invalid user user [preauth]
Sep 28 19:07:43 nativespace-cdp sshd[30249]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:07:43 nativespace-cdp sshd[30249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.27.90.117
Sep 28 19:07:45 nativespace-cdp sshd[30249]: Failed password for invalid user user from 178.27.90.117 port 53600 ssh2
Sep 28 19:07:49 nativespace-cdp sshd[30249]: Received disconnect from 178.27.90.117 port 53600:11: Bye Bye [preauth]
Sep 28 19:07:49 nativespace-cdp sshd[30249]: Disconnected from 178.27.90.117 port 53600 [preauth]
Sep 28 19:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 19:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:28 nativespace-cdp sudo[30585]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 19:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:28 nativespace-cdp sudo[30588]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 19:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:30 nativespace-cdp sudo[30591]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 19:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:30 nativespace-cdp sudo[30599]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 19:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:33 nativespace-cdp sudo[30603]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:33 nativespace-cdp sudo[30614]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:33 nativespace-cdp sudo[30618]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:33 nativespace-cdp sudo[30621]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:33 nativespace-cdp sudo[30624]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:33 nativespace-cdp sudo[30628]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:33 nativespace-cdp sudo[30631]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 19:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:35 nativespace-cdp sudo[30646]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 19:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:36 nativespace-cdp sudo[30650]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hirefootballgame user-2=courseme user-3=eugincou user-4=reliable user-5=ninejimm user-6=cathski user-7=cambria1 user-8=pugwash user-9=paulmca1 user-10=howardon user-11=cwsocial user-12=isleofwi user-13=smrszyqg user-14=tigerlet user-15=barbersh user-16=hidden user-17=nomistakes user-18=fortunaz user-19=health2045 user-20=foods user-21=leftie user-22=nscdp user-23=philmcph user-24=ctedorgu user-25=donnychicago user-26=firstre5 user-27=steakbridieme user-28=lkpier user-29=eatspam user-30=darkstar user-31=beauty user-32=dhyana user-33=burydropin user-34=fawcettd user-35=nsceres user-36=zebrapho user-37=bwppodcast user-38=steve user-39=sibtoncc user-40=asandcoc user-41=kategilpin user-42=ladburyp user-43=stagingerris user-44=dancinggardener user-45=design user-46=what user-47=tstardom
Sep 28 19:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=oubpgvbx user-49=nvihkvu user-50=cath user-51=sketchy user-52=havantho user-53=sosevalu user-54=crrtipdl user-55=bakery user-56=nove user-57=boldover user-58=branko user-59=outdoorc user-60=hodgsonmail user-61=ranxterc user-62=romaldki user-63=attlebor user-64=lucy user-65=onlycont user-66=mcdermos user-67=chrisdal user-68=nbhavers user-69=careers user-70=david user-71=tomandle user-72=jennimil user-73=lbhyisi user-74=hhdugcor user-75=magichat user-76=martsblo user-77=ptkxhsbt user-78=dickemery123 user-79=wilsonsw user-80=musorguk user-81=megacards user-82=lakesan1 user-83=brmrjxl user-84=sarafoundation user-85=atestord user-86=strathar user-87=still user-88=agproduc user-89=leereyn1 user-90=stephani user-91=jarvisin user-92=hodgesonweb user-93=theblack user-94=spectrum user-95=ulsukarm user-96=markward user-97=booff user-98=foundation user-99=maflemin user-100=lbscrmod user-101=connect9 user-102=athenare
Sep 28 19:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=vantagep user-104=stuartge user-105=askhform user-106=innovat1 user-107=nativene user-108=skyfirec user-109=alexadmin user-110=bedfords user-111=bemadonn user-112=ggaaorgu user-113=belle user-114=newstoda user-115=brighto1 user-116=nstriton user-117=battlere user-118=oneoarco user-119=firstre2 user-120=vivienn1 user-121=ianrayne user-122=accooper user-123=thqkgnbz user-124=connectedshoppin user-125=elecleis user-126=milloyco user-127=gilpin user-128=carsinyo user-129=fetch user-130=hubmaster user-131=costestimatorco user-132=firstrel user-133=clarkass user-134=southlon user-135=highlegh user-136=firstred user-137=firstres user-138=jonhartl user-139=seftvta user-140=ultbcrra user-141=opaiscyx user-142=coursemc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 19:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 19:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:37 nativespace-cdp sudo[30657]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:38 nativespace-cdp sudo[30664]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FGtXc3jcJGSUUVWM.~
Sep 28 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:38 nativespace-cdp sudo[30671]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FGtXc3jcJGSUUVWM.~'
Sep 28 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:38 nativespace-cdp sudo[30674]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FGtXc3jcJGSUUVWM.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:38 nativespace-cdp sudo[30678]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:38 nativespace-cdp sudo[30681]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 28 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:39 nativespace-cdp sudo[30684]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 19:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 19:09:40 nativespace-cdp sudo[30710]: pam_unix(sudo:session): session closed for user root
Sep 28 19:09:58 nativespace-cdp sshd[30739]: Invalid user user from 92.222.10.235 port 43444
Sep 28 19:09:58 nativespace-cdp sshd[30739]: input_userauth_request: invalid user user [preauth]
Sep 28 19:09:58 nativespace-cdp sshd[30739]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:09:58 nativespace-cdp sshd[30739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.10.235
Sep 28 19:10:01 nativespace-cdp sshd[30739]: Failed password for invalid user user from 92.222.10.235 port 43444 ssh2
Sep 28 19:10:01 nativespace-cdp sshd[30739]: Received disconnect from 92.222.10.235 port 43444:11: Bye Bye [preauth]
Sep 28 19:10:01 nativespace-cdp sshd[30739]: Disconnected from 92.222.10.235 port 43444 [preauth]
Sep 28 19:10:20 nativespace-cdp sshd[30906]: Invalid user user from 157.245.151.195 port 32850
Sep 28 19:10:20 nativespace-cdp sshd[30906]: input_userauth_request: invalid user user [preauth]
Sep 28 19:10:20 nativespace-cdp sshd[30906]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:10:20 nativespace-cdp sshd[30906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.151.195
Sep 28 19:10:22 nativespace-cdp sshd[30906]: Failed password for invalid user user from 157.245.151.195 port 32850 ssh2
Sep 28 19:10:29 nativespace-cdp sshd[30906]: Received disconnect from 157.245.151.195 port 32850:11: Bye Bye [preauth]
Sep 28 19:10:29 nativespace-cdp sshd[30906]: Disconnected from 157.245.151.195 port 32850 [preauth]
Sep 28 19:11:34 nativespace-cdp sshd[31161]: Connection closed by 159.100.136.21 port 44506 [preauth]
Sep 28 19:11:50 nativespace-cdp sshd[31205]: Invalid user tomcat from 61.222.211.114 port 44678
Sep 28 19:11:50 nativespace-cdp sshd[31205]: input_userauth_request: invalid user tomcat [preauth]
Sep 28 19:11:50 nativespace-cdp sshd[31205]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:11:50 nativespace-cdp sshd[31205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.222.211.114
Sep 28 19:11:52 nativespace-cdp sshd[31205]: Failed password for invalid user tomcat from 61.222.211.114 port 44678 ssh2
Sep 28 19:11:53 nativespace-cdp sshd[31205]: Received disconnect from 61.222.211.114 port 44678:11: Bye Bye [preauth]
Sep 28 19:11:53 nativespace-cdp sshd[31205]: Disconnected from 61.222.211.114 port 44678 [preauth]
Sep 28 19:12:20 nativespace-cdp sshd[31289]: Invalid user ubuntu from 178.27.90.117 port 50080
Sep 28 19:12:20 nativespace-cdp sshd[31289]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 19:12:20 nativespace-cdp sshd[31289]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:12:20 nativespace-cdp sshd[31289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.27.90.117
Sep 28 19:12:22 nativespace-cdp sshd[31289]: Failed password for invalid user ubuntu from 178.27.90.117 port 50080 ssh2
Sep 28 19:12:22 nativespace-cdp sshd[31289]: Received disconnect from 178.27.90.117 port 50080:11: Bye Bye [preauth]
Sep 28 19:12:22 nativespace-cdp sshd[31289]: Disconnected from 178.27.90.117 port 50080 [preauth]
Sep 28 19:12:56 nativespace-cdp sshd[31370]: Invalid user shared from 92.222.10.235 port 46920
Sep 28 19:12:56 nativespace-cdp sshd[31370]: input_userauth_request: invalid user shared [preauth]
Sep 28 19:12:56 nativespace-cdp sshd[31370]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:12:56 nativespace-cdp sshd[31370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.10.235
Sep 28 19:12:58 nativespace-cdp sshd[31370]: Failed password for invalid user shared from 92.222.10.235 port 46920 ssh2
Sep 28 19:13:01 nativespace-cdp sshd[31370]: Received disconnect from 92.222.10.235 port 46920:11: Bye Bye [preauth]
Sep 28 19:13:01 nativespace-cdp sshd[31370]: Disconnected from 92.222.10.235 port 46920 [preauth]
Sep 28 19:13:02 nativespace-cdp sshd[31409]: Invalid user user from 178.27.90.117 port 41654
Sep 28 19:13:02 nativespace-cdp sshd[31409]: input_userauth_request: invalid user user [preauth]
Sep 28 19:13:02 nativespace-cdp sshd[31409]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:13:02 nativespace-cdp sshd[31409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.27.90.117
Sep 28 19:13:02 nativespace-cdp sshd[31411]: Invalid user ubuntu from 13.78.190.191 port 43502
Sep 28 19:13:02 nativespace-cdp sshd[31411]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 19:13:02 nativespace-cdp sshd[31411]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:13:02 nativespace-cdp sshd[31411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.78.190.191
Sep 28 19:13:04 nativespace-cdp sshd[31409]: Failed password for invalid user user from 178.27.90.117 port 41654 ssh2
Sep 28 19:13:04 nativespace-cdp sshd[31409]: Received disconnect from 178.27.90.117 port 41654:11: Bye Bye [preauth]
Sep 28 19:13:04 nativespace-cdp sshd[31409]: Disconnected from 178.27.90.117 port 41654 [preauth]
Sep 28 19:13:05 nativespace-cdp sshd[31411]: Failed password for invalid user ubuntu from 13.78.190.191 port 43502 ssh2
Sep 28 19:13:05 nativespace-cdp sshd[31411]: Received disconnect from 13.78.190.191 port 43502:11: Bye Bye [preauth]
Sep 28 19:13:05 nativespace-cdp sshd[31411]: Disconnected from 13.78.190.191 port 43502 [preauth]
Sep 28 19:13:17 nativespace-cdp sshd[31527]: Invalid user ubuntu from 61.222.211.114 port 34894
Sep 28 19:13:17 nativespace-cdp sshd[31527]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 19:13:17 nativespace-cdp sshd[31527]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:13:17 nativespace-cdp sshd[31527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.222.211.114
Sep 28 19:13:17 nativespace-cdp sshd[31530]: Invalid user test from 152.168.201.202 port 48841
Sep 28 19:13:17 nativespace-cdp sshd[31530]: input_userauth_request: invalid user test [preauth]
Sep 28 19:13:17 nativespace-cdp sshd[31530]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:13:17 nativespace-cdp sshd[31530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.201.202
Sep 28 19:13:19 nativespace-cdp sshd[31527]: Failed password for invalid user ubuntu from 61.222.211.114 port 34894 ssh2
Sep 28 19:13:19 nativespace-cdp sshd[31530]: Failed password for invalid user test from 152.168.201.202 port 48841 ssh2
Sep 28 19:13:19 nativespace-cdp sshd[31527]: Received disconnect from 61.222.211.114 port 34894:11: Bye Bye [preauth]
Sep 28 19:13:19 nativespace-cdp sshd[31527]: Disconnected from 61.222.211.114 port 34894 [preauth]
Sep 28 19:13:19 nativespace-cdp sshd[31530]: Received disconnect from 152.168.201.202 port 48841:11: Bye Bye [preauth]
Sep 28 19:13:19 nativespace-cdp sshd[31530]: Disconnected from 152.168.201.202 port 48841 [preauth]
Sep 28 19:13:23 nativespace-cdp sshd[31585]: Invalid user ubuntu from 157.245.151.195 port 58054
Sep 28 19:13:23 nativespace-cdp sshd[31585]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 19:13:23 nativespace-cdp sshd[31585]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:13:23 nativespace-cdp sshd[31585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.151.195
Sep 28 19:13:25 nativespace-cdp sshd[31585]: Failed password for invalid user ubuntu from 157.245.151.195 port 58054 ssh2
Sep 28 19:13:25 nativespace-cdp sshd[31585]: Received disconnect from 157.245.151.195 port 58054:11: Bye Bye [preauth]
Sep 28 19:13:25 nativespace-cdp sshd[31585]: Disconnected from 157.245.151.195 port 58054 [preauth]
Sep 28 19:13:34 nativespace-cdp sshd[31759]: Invalid user ubuntu from 92.222.10.235 port 59534
Sep 28 19:13:34 nativespace-cdp sshd[31759]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 19:13:34 nativespace-cdp sshd[31759]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:13:34 nativespace-cdp sshd[31759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.10.235
Sep 28 19:13:36 nativespace-cdp sshd[31759]: Failed password for invalid user ubuntu from 92.222.10.235 port 59534 ssh2
Sep 28 19:13:36 nativespace-cdp sshd[31759]: Received disconnect from 92.222.10.235 port 59534:11: Bye Bye [preauth]
Sep 28 19:13:36 nativespace-cdp sshd[31759]: Disconnected from 92.222.10.235 port 59534 [preauth]
Sep 28 19:13:37 nativespace-cdp sshd[31804]: Invalid user sopuser from 81.192.87.130 port 29350
Sep 28 19:13:37 nativespace-cdp sshd[31804]: input_userauth_request: invalid user sopuser [preauth]
Sep 28 19:13:37 nativespace-cdp sshd[31804]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:13:37 nativespace-cdp sshd[31804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.87.130
Sep 28 19:13:39 nativespace-cdp sshd[31804]: Failed password for invalid user sopuser from 81.192.87.130 port 29350 ssh2
Sep 28 19:13:39 nativespace-cdp sshd[31804]: Received disconnect from 81.192.87.130 port 29350:11: Bye Bye [preauth]
Sep 28 19:13:39 nativespace-cdp sshd[31804]: Disconnected from 81.192.87.130 port 29350 [preauth]
Sep 28 19:13:43 nativespace-cdp sshd[31867]: Invalid user user from 13.78.190.191 port 48916
Sep 28 19:13:43 nativespace-cdp sshd[31867]: input_userauth_request: invalid user user [preauth]
Sep 28 19:13:43 nativespace-cdp sshd[31867]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:13:43 nativespace-cdp sshd[31867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.78.190.191
Sep 28 19:13:45 nativespace-cdp sshd[31867]: Failed password for invalid user user from 13.78.190.191 port 48916 ssh2
Sep 28 19:13:48 nativespace-cdp sshd[31867]: Received disconnect from 13.78.190.191 port 48916:11: Bye Bye [preauth]
Sep 28 19:13:48 nativespace-cdp sshd[31867]: Disconnected from 13.78.190.191 port 48916 [preauth]
Sep 28 19:13:51 nativespace-cdp sshd[31958]: Invalid user tuan from 222.252.21.30 port 51266
Sep 28 19:13:51 nativespace-cdp sshd[31958]: input_userauth_request: invalid user tuan [preauth]
Sep 28 19:13:51 nativespace-cdp sshd[31958]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:13:51 nativespace-cdp sshd[31958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.252.21.30
Sep 28 19:13:53 nativespace-cdp sshd[31958]: Failed password for invalid user tuan from 222.252.21.30 port 51266 ssh2
Sep 28 19:13:53 nativespace-cdp sshd[31958]: Received disconnect from 222.252.21.30 port 51266:11: Bye Bye [preauth]
Sep 28 19:13:53 nativespace-cdp sshd[31958]: Disconnected from 222.252.21.30 port 51266 [preauth]
Sep 28 19:14:08 nativespace-cdp sshd[32280]: Invalid user superman from 61.222.211.114 port 59146
Sep 28 19:14:08 nativespace-cdp sshd[32280]: input_userauth_request: invalid user superman [preauth]
Sep 28 19:14:08 nativespace-cdp sshd[32280]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:14:08 nativespace-cdp sshd[32280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.222.211.114
Sep 28 19:14:09 nativespace-cdp sshd[32286]: Invalid user svn from 157.245.151.195 port 48332
Sep 28 19:14:09 nativespace-cdp sshd[32286]: input_userauth_request: invalid user svn [preauth]
Sep 28 19:14:09 nativespace-cdp sshd[32286]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:14:09 nativespace-cdp sshd[32286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.151.195
Sep 28 19:14:11 nativespace-cdp sshd[32280]: Failed password for invalid user superman from 61.222.211.114 port 59146 ssh2
Sep 28 19:14:11 nativespace-cdp sshd[32280]: Received disconnect from 61.222.211.114 port 59146:11: Bye Bye [preauth]
Sep 28 19:14:11 nativespace-cdp sshd[32280]: Disconnected from 61.222.211.114 port 59146 [preauth]
Sep 28 19:14:11 nativespace-cdp sshd[32286]: Failed password for invalid user svn from 157.245.151.195 port 48332 ssh2
Sep 28 19:14:33 nativespace-cdp sshd[32509]: Invalid user nexus from 81.192.87.130 port 37201
Sep 28 19:14:33 nativespace-cdp sshd[32509]: input_userauth_request: invalid user nexus [preauth]
Sep 28 19:14:33 nativespace-cdp sshd[32509]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:14:33 nativespace-cdp sshd[32509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.87.130
Sep 28 19:14:35 nativespace-cdp sshd[32509]: Failed password for invalid user nexus from 81.192.87.130 port 37201 ssh2
Sep 28 19:14:35 nativespace-cdp sshd[32509]: Received disconnect from 81.192.87.130 port 37201:11: Bye Bye [preauth]
Sep 28 19:14:35 nativespace-cdp sshd[32509]: Disconnected from 81.192.87.130 port 37201 [preauth]
Sep 28 19:15:21 nativespace-cdp sshd[410]: Invalid user ubuntu from 81.192.87.130 port 44495
Sep 28 19:15:21 nativespace-cdp sshd[410]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 19:15:21 nativespace-cdp sshd[410]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:15:21 nativespace-cdp sshd[410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.87.130
Sep 28 19:15:23 nativespace-cdp sshd[410]: Failed password for invalid user ubuntu from 81.192.87.130 port 44495 ssh2
Sep 28 19:15:50 nativespace-cdp sshd[505]: Invalid user user from 222.252.21.30 port 50212
Sep 28 19:15:50 nativespace-cdp sshd[505]: input_userauth_request: invalid user user [preauth]
Sep 28 19:15:50 nativespace-cdp sshd[505]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:15:50 nativespace-cdp sshd[505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.252.21.30
Sep 28 19:15:53 nativespace-cdp sshd[505]: Failed password for invalid user user from 222.252.21.30 port 50212 ssh2
Sep 28 19:15:53 nativespace-cdp sshd[505]: Received disconnect from 222.252.21.30 port 50212:11: Bye Bye [preauth]
Sep 28 19:15:53 nativespace-cdp sshd[505]: Disconnected from 222.252.21.30 port 50212 [preauth]
Sep 28 19:16:33 nativespace-cdp sshd[616]: Connection closed by 159.100.136.21 port 54348 [preauth]
Sep 28 19:16:43 nativespace-cdp sshd[646]: Invalid user nb from 222.252.21.30 port 34412
Sep 28 19:16:43 nativespace-cdp sshd[646]: input_userauth_request: invalid user nb [preauth]
Sep 28 19:16:43 nativespace-cdp sshd[646]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:16:43 nativespace-cdp sshd[646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.252.21.30
Sep 28 19:16:44 nativespace-cdp sshd[646]: Failed password for invalid user nb from 222.252.21.30 port 34412 ssh2
Sep 28 19:16:45 nativespace-cdp sshd[646]: Received disconnect from 222.252.21.30 port 34412:11: Bye Bye [preauth]
Sep 28 19:16:45 nativespace-cdp sshd[646]: Disconnected from 222.252.21.30 port 34412 [preauth]
Sep 28 19:19:30 nativespace-cdp sshd[1149]: Invalid user user from 152.168.201.202 port 33656
Sep 28 19:19:30 nativespace-cdp sshd[1149]: input_userauth_request: invalid user user [preauth]
Sep 28 19:19:30 nativespace-cdp sshd[1149]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:19:30 nativespace-cdp sshd[1149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.201.202
Sep 28 19:19:32 nativespace-cdp sshd[1149]: Failed password for invalid user user from 152.168.201.202 port 33656 ssh2
Sep 28 19:19:32 nativespace-cdp sshd[1149]: Received disconnect from 152.168.201.202 port 33656:11: Bye Bye [preauth]
Sep 28 19:19:32 nativespace-cdp sshd[1149]: Disconnected from 152.168.201.202 port 33656 [preauth]
Sep 28 19:21:04 nativespace-cdp sshd[1557]: Invalid user ubuntu from 152.168.201.202 port 53256
Sep 28 19:21:04 nativespace-cdp sshd[1557]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 19:21:04 nativespace-cdp sshd[1557]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 19:21:04 nativespace-cdp sshd[1557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.201.202
Sep 28 19:21:06 nativespace-cdp sshd[1557]: Failed password for invalid user ubuntu from 152.168.201.202 port 53256 ssh2
Sep 28 19:21:06 nativespace-cdp sshd[1557]: Received disconnect from 152.168.201.202 port 53256:11: Bye Bye [preauth]
Sep 28 19:21:06 nativespace-cdp sshd[1557]: Disconnected from 152.168.201.202 port 53256 [preauth]
Sep 28 19:21:35 nativespace-cdp sshd[1681]: Connection closed by 159.100.136.21 port 35444 [preauth]
Sep 28 19:26:33 nativespace-cdp sshd[2683]: Connection closed by 159.100.136.21 port 45148 [preauth]
Sep 28 19:31:33 nativespace-cdp sshd[3977]: Connection closed by 159.100.136.21 port 54464 [preauth]
Sep 28 19:46:33 nativespace-cdp sshd[6934]: Connection closed by 159.100.136.21 port 54814 [preauth]
Sep 28 19:51:33 nativespace-cdp sshd[8131]: Connection closed by 159.100.136.21 port 36148 [preauth]
Sep 28 19:56:33 nativespace-cdp sshd[9131]: Connection closed by 159.100.136.21 port 46054 [preauth]
Sep 28 20:01:33 nativespace-cdp sshd[10522]: Connection closed by 159.100.136.21 port 55658 [preauth]
Sep 28 20:06:33 nativespace-cdp sshd[11525]: Connection closed by 159.100.136.21 port 37332 [preauth]
Sep 28 20:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 20:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:22 nativespace-cdp sudo[12044]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 20:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:22 nativespace-cdp sudo[12047]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 20:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:24 nativespace-cdp sudo[12050]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 20:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:24 nativespace-cdp sudo[12064]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 20:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:28 nativespace-cdp sudo[12067]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:28 nativespace-cdp sudo[12080]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:28 nativespace-cdp sudo[12083]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:28 nativespace-cdp sudo[12086]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:28 nativespace-cdp sudo[12089]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:28 nativespace-cdp sudo[12093]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:28 nativespace-cdp sudo[12096]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 20:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:49 nativespace-cdp sudo[12157]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 20:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:50 nativespace-cdp sudo[12162]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bakery user-2=sosevalu user-3=crrtipdl user-4=nove user-5=boldover user-6=ladburyp user-7=dancinggardener user-8=stagingerris user-9=kategilpin user-10=design user-11=tstardom user-12=oubpgvbx user-13=what user-14=sketchy user-15=cath user-16=havantho user-17=nvihkvu user-18=chrisdal user-19=mcdermos user-20=nbhavers user-21=careers user-22=david user-23=tomandle user-24=jennimil user-25=hodgsonmail user-26=outdoorc user-27=ranxterc user-28=branko user-29=romaldki user-30=attlebor user-31=lucy user-32=onlycont user-33=isleofwi user-34=smrszyqg user-35=hidden user-36=nomistakes user-37=tigerlet user-38=barbersh user-39=nscdp user-40=health2045 user-41=fortunaz user-42=foods user-43=leftie user-44=lkpier user-45=ctedorgu user-46=philmcph user-47=firstre5 user-48=donnychicago user-49=steakbridieme
Sep 28 20:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=hirefootballgame user-51=eugincou user-52=courseme user-53=cathski user-54=cambria1 user-55=reliable user-56=ninejimm user-57=paulmca1 user-58=howardon user-59=pugwash user-60=cwsocial user-61=bwppodcast user-62=zebrapho user-63=steve user-64=sibtoncc user-65=asandcoc user-66=beauty user-67=eatspam user-68=darkstar user-69=dhyana user-70=burydropin user-71=fawcettd user-72=nsceres user-73=bedfords user-74=belle user-75=ggaaorgu user-76=newstoda user-77=bemadonn user-78=brighto1 user-79=nstriton user-80=firstre2 user-81=vivienn1 user-82=battlere user-83=oneoarco user-84=innovat1 user-85=askhform user-86=stuartge user-87=nativene user-88=alexadmin user-89=skyfirec user-90=firstrel user-91=clarkass user-92=costestimatorco user-93=firstred user-94=southlon user-95=highlegh user-96=jonhartl user-97=seftvta user-98=ultbcrra user-99=firstres user-100=coursemc user-101=opaiscyx user-102=accooper user-103=ianrayne
Sep 28 20:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=connectedshoppin user-105=thqkgnbz user-106=gilpin user-107=milloyco user-108=elecleis user-109=hubmaster user-110=carsinyo user-111=fetch user-112=wilsonsw user-113=musorguk user-114=megacards user-115=lakesan1 user-116=brmrjxl user-117=strathar user-118=sarafoundation user-119=atestord user-120=lbhyisi user-121=hhdugcor user-122=magichat user-123=martsblo user-124=dickemery123 user-125=ptkxhsbt user-126=ulsukarm user-127=booff user-128=foundation user-129=markward user-130=athenare user-131=connect9 user-132=vantagep user-133=maflemin user-134=lbscrmod user-135=still user-136=agproduc user-137=stephani user-138=leereyn1 user-139=jarvisin user-140=spectrum user-141=theblack user-142=hodgesonweb feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 20:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 20:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:51 nativespace-cdp sudo[12167]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 20:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:51 nativespace-cdp sudo[12172]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BF4ZnhwnDPgGBbj9.~
Sep 28 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:52 nativespace-cdp sudo[12176]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BF4ZnhwnDPgGBbj9.~'
Sep 28 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:52 nativespace-cdp sudo[12179]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BF4ZnhwnDPgGBbj9.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:52 nativespace-cdp sudo[12183]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:52 nativespace-cdp sudo[12186]: pam_unix(sudo:session): session closed for user root
Sep 28 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 20:09:59 nativespace-cdp sudo[12213]: pam_unix(sudo:session): session closed for user root
Sep 28 20:11:33 nativespace-cdp sshd[12599]: Connection closed by 159.100.136.21 port 46786 [preauth]
Sep 28 20:16:36 nativespace-cdp sshd[13912]: Connection closed by 159.100.136.21 port 56468 [preauth]
Sep 28 20:21:33 nativespace-cdp sshd[14856]: Connection closed by 159.100.136.21 port 36938 [preauth]
Sep 28 20:26:34 nativespace-cdp sshd[15866]: Connection closed by 159.100.136.21 port 46758 [preauth]
Sep 28 20:31:33 nativespace-cdp sshd[17160]: Connection closed by 159.100.136.21 port 56176 [preauth]
Sep 28 20:36:33 nativespace-cdp sshd[18222]: Connection closed by 159.100.136.21 port 37558 [preauth]
Sep 28 20:41:33 nativespace-cdp sshd[19384]: Connection closed by 159.100.136.21 port 47032 [preauth]
Sep 28 20:46:34 nativespace-cdp sshd[20616]: Connection closed by 159.100.136.21 port 56968 [preauth]
Sep 28 20:51:33 nativespace-cdp sshd[21648]: Connection closed by 159.100.136.21 port 38442 [preauth]
Sep 28 20:52:07 nativespace-cdp sshd[21717]: Invalid user steam from 190.173.96.74 port 58932
Sep 28 20:52:07 nativespace-cdp sshd[21717]: input_userauth_request: invalid user steam [preauth]
Sep 28 20:52:07 nativespace-cdp sshd[21717]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 20:52:07 nativespace-cdp sshd[21717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.173.96.74
Sep 28 20:52:09 nativespace-cdp sshd[21717]: Failed password for invalid user steam from 190.173.96.74 port 58932 ssh2
Sep 28 20:52:09 nativespace-cdp sshd[21717]: Received disconnect from 190.173.96.74 port 58932:11: Bye Bye [preauth]
Sep 28 20:52:09 nativespace-cdp sshd[21717]: Disconnected from 190.173.96.74 port 58932 [preauth]
Sep 28 20:53:31 nativespace-cdp sshd[21988]: Invalid user nextcloud from 159.203.9.43 port 57956
Sep 28 20:53:31 nativespace-cdp sshd[21988]: input_userauth_request: invalid user nextcloud [preauth]
Sep 28 20:53:31 nativespace-cdp sshd[21988]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 20:53:31 nativespace-cdp sshd[21988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.9.43
Sep 28 20:53:33 nativespace-cdp sshd[21988]: Failed password for invalid user nextcloud from 159.203.9.43 port 57956 ssh2
Sep 28 20:53:36 nativespace-cdp sshd[21988]: Received disconnect from 159.203.9.43 port 57956:11: Bye Bye [preauth]
Sep 28 20:53:36 nativespace-cdp sshd[21988]: Disconnected from 159.203.9.43 port 57956 [preauth]
Sep 28 20:55:53 nativespace-cdp sshd[22569]: Invalid user radix from 159.203.9.43 port 56224
Sep 28 20:55:53 nativespace-cdp sshd[22569]: input_userauth_request: invalid user radix [preauth]
Sep 28 20:55:53 nativespace-cdp sshd[22569]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 20:55:53 nativespace-cdp sshd[22569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.9.43
Sep 28 20:55:55 nativespace-cdp sshd[22569]: Failed password for invalid user radix from 159.203.9.43 port 56224 ssh2
Sep 28 20:55:56 nativespace-cdp sshd[22569]: Received disconnect from 159.203.9.43 port 56224:11: Bye Bye [preauth]
Sep 28 20:55:56 nativespace-cdp sshd[22569]: Disconnected from 159.203.9.43 port 56224 [preauth]
Sep 28 20:56:19 nativespace-cdp sshd[22635]: Invalid user iptv from 181.31.113.45 port 52928
Sep 28 20:56:19 nativespace-cdp sshd[22635]: input_userauth_request: invalid user iptv [preauth]
Sep 28 20:56:19 nativespace-cdp sshd[22635]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 20:56:19 nativespace-cdp sshd[22635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.31.113.45
Sep 28 20:56:21 nativespace-cdp sshd[22635]: Failed password for invalid user iptv from 181.31.113.45 port 52928 ssh2
Sep 28 20:56:21 nativespace-cdp sshd[22635]: Received disconnect from 181.31.113.45 port 52928:11: Bye Bye [preauth]
Sep 28 20:56:21 nativespace-cdp sshd[22635]: Disconnected from 181.31.113.45 port 52928 [preauth]
Sep 28 20:56:29 nativespace-cdp sshd[22658]: Invalid user iptv from 159.203.9.43 port 40830
Sep 28 20:56:29 nativespace-cdp sshd[22658]: input_userauth_request: invalid user iptv [preauth]
Sep 28 20:56:29 nativespace-cdp sshd[22658]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 20:56:29 nativespace-cdp sshd[22658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.9.43
Sep 28 20:56:32 nativespace-cdp sshd[22658]: Failed password for invalid user iptv from 159.203.9.43 port 40830 ssh2
Sep 28 20:56:32 nativespace-cdp sshd[22658]: Received disconnect from 159.203.9.43 port 40830:11: Bye Bye [preauth]
Sep 28 20:56:32 nativespace-cdp sshd[22658]: Disconnected from 159.203.9.43 port 40830 [preauth]
Sep 28 20:56:33 nativespace-cdp sshd[22691]: Connection closed by 159.100.136.21 port 48474 [preauth]
Sep 28 20:57:20 nativespace-cdp sshd[22797]: Invalid user odoo from 190.173.96.74 port 60882
Sep 28 20:57:20 nativespace-cdp sshd[22797]: input_userauth_request: invalid user odoo [preauth]
Sep 28 20:57:20 nativespace-cdp sshd[22797]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 20:57:20 nativespace-cdp sshd[22797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.173.96.74
Sep 28 20:57:22 nativespace-cdp sshd[22797]: Failed password for invalid user odoo from 190.173.96.74 port 60882 ssh2
Sep 28 20:57:22 nativespace-cdp sshd[22797]: Received disconnect from 190.173.96.74 port 60882:11: Bye Bye [preauth]
Sep 28 20:57:22 nativespace-cdp sshd[22797]: Disconnected from 190.173.96.74 port 60882 [preauth]
Sep 28 20:58:09 nativespace-cdp sshd[23020]: Invalid user iptv from 181.31.113.45 port 41788
Sep 28 20:58:09 nativespace-cdp sshd[23020]: input_userauth_request: invalid user iptv [preauth]
Sep 28 20:58:09 nativespace-cdp sshd[23020]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 20:58:09 nativespace-cdp sshd[23020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.31.113.45
Sep 28 20:58:10 nativespace-cdp sshd[23020]: Failed password for invalid user iptv from 181.31.113.45 port 41788 ssh2
Sep 28 20:58:10 nativespace-cdp sshd[23020]: Received disconnect from 181.31.113.45 port 41788:11: Bye Bye [preauth]
Sep 28 20:58:10 nativespace-cdp sshd[23020]: Disconnected from 181.31.113.45 port 41788 [preauth]
Sep 28 20:59:05 nativespace-cdp sshd[23247]: Connection closed by 181.31.113.45 port 61052 [preauth]
Sep 28 20:59:57 nativespace-cdp sshd[23468]: Invalid user server from 181.31.113.45 port 56198
Sep 28 20:59:57 nativespace-cdp sshd[23468]: input_userauth_request: invalid user server [preauth]
Sep 28 20:59:57 nativespace-cdp sshd[23468]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 20:59:57 nativespace-cdp sshd[23468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.31.113.45
Sep 28 20:59:59 nativespace-cdp sshd[23468]: Failed password for invalid user server from 181.31.113.45 port 56198 ssh2
Sep 28 21:01:33 nativespace-cdp sshd[24046]: Connection closed by 159.100.136.21 port 58040 [preauth]
Sep 28 21:06:34 nativespace-cdp sshd[25152]: Connection closed by 159.100.136.21 port 39910 [preauth]
Sep 28 21:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 21:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:16 nativespace-cdp sudo[25636]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 21:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:16 nativespace-cdp sudo[25639]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 21:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:17 nativespace-cdp sudo[25642]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 21:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:17 nativespace-cdp sudo[25647]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 21:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:19 nativespace-cdp sudo[25650]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 21:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:19 nativespace-cdp sudo[25668]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 21:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:19 nativespace-cdp sudo[25671]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 21:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:19 nativespace-cdp sudo[25674]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 21:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:20 nativespace-cdp sudo[25677]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 21:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:20 nativespace-cdp sudo[25681]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 21:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:20 nativespace-cdp sudo[25684]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 21:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:21 nativespace-cdp sudo[25692]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 21:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:22 nativespace-cdp sudo[25696]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=brighto1 user-2=nstriton user-3=battlere user-4=oneoarco user-5=firstre2 user-6=vivienn1 user-7=bedfords user-8=bemadonn user-9=belle user-10=ggaaorgu user-11=newstoda user-12=alexadmin user-13=skyfirec user-14=stuartge user-15=askhform user-16=innovat1 user-17=nativene user-18=firstres user-19=jonhartl user-20=seftvta user-21=ultbcrra user-22=opaiscyx user-23=coursemc user-24=costestimatorco user-25=firstrel user-26=clarkass user-27=southlon user-28=highlegh user-29=firstred user-30=elecleis user-31=gilpin user-32=milloyco user-33=carsinyo user-34=fetch user-35=hubmaster user-36=ianrayne user-37=accooper user-38=thqkgnbz user-39=connectedshoppin user-40=brmrjxl user-41=lakesan1 user-42=sarafoundation user-43=atestord user-44=strathar user-45=wilsonsw user-46=musorguk user-47=megacards
Sep 28 21:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=martsblo user-49=ptkxhsbt user-50=dickemery123 user-51=lbhyisi user-52=hhdugcor user-53=magichat user-54=booff user-55=markward user-56=foundation user-57=maflemin user-58=lbscrmod user-59=connect9 user-60=athenare user-61=vantagep user-62=ulsukarm user-63=jarvisin user-64=hodgesonweb user-65=theblack user-66=spectrum user-67=still user-68=agproduc user-69=leereyn1 user-70=stephani user-71=nove user-72=boldover user-73=sosevalu user-74=crrtipdl user-75=bakery user-76=what user-77=oubpgvbx user-78=tstardom user-79=nvihkvu user-80=cath user-81=sketchy user-82=havantho user-83=kategilpin user-84=ladburyp user-85=stagingerris user-86=dancinggardener user-87=design user-88=tomandle user-89=jennimil user-90=mcdermos user-91=chrisdal user-92=careers user-93=nbhavers user-94=david user-95=attlebor user-96=lucy user-97=onlycont user-98=branko user-99=outdoorc user-100=hodgsonmail user-101=ranxterc
Sep 28 21:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=romaldki user-103=fortunaz user-104=health2045 user-105=leftie user-106=foods user-107=nscdp user-108=ctedorgu user-109=philmcph user-110=firstre5 user-111=steakbridieme user-112=donnychicago user-113=lkpier user-114=smrszyqg user-115=isleofwi user-116=tigerlet user-117=barbersh user-118=hidden user-119=nomistakes user-120=reliable user-121=ninejimm user-122=cathski user-123=cambria1 user-124=paulmca1 user-125=pugwash user-126=howardon user-127=cwsocial user-128=hirefootballgame user-129=courseme user-130=eugincou user-131=asandcoc user-132=sibtoncc user-133=zebrapho user-134=bwppodcast user-135=steve user-136=burydropin user-137=fawcettd user-138=nsceres user-139=eatspam user-140=darkstar user-141=beauty user-142=dhyana feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 28 21:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 21:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:22 nativespace-cdp sudo[25702]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 21:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:23 nativespace-cdp sudo[25707]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rQYowdoHoiy2WPhm.~
Sep 28 21:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:23 nativespace-cdp sudo[25710]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rQYowdoHoiy2WPhm.~'
Sep 28 21:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:23 nativespace-cdp sudo[25714]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rQYowdoHoiy2WPhm.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 21:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:23 nativespace-cdp sudo[25718]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 21:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:23 nativespace-cdp sudo[25722]: pam_unix(sudo:session): session closed for user root
Sep 28 21:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 21:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:09:25 nativespace-cdp sudo[25742]: pam_unix(sudo:session): session closed for user root
Sep 28 21:11:35 nativespace-cdp sshd[26306]: Connection closed by 159.100.136.21 port 49428 [preauth]
Sep 28 21:13:44 nativespace-cdp sshd[26749]: Bad protocol version identification '\003' from 194.165.16.72 port 65336
Sep 28 21:14:04 nativespace-cdp sshd[26954]: Invalid user postgres from 190.173.96.74 port 36140
Sep 28 21:14:04 nativespace-cdp sshd[26954]: input_userauth_request: invalid user postgres [preauth]
Sep 28 21:14:04 nativespace-cdp sshd[26954]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 21:14:04 nativespace-cdp sshd[26954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.173.96.74
Sep 28 21:14:05 nativespace-cdp sshd[26954]: Failed password for invalid user postgres from 190.173.96.74 port 36140 ssh2
Sep 28 21:14:06 nativespace-cdp sshd[26954]: Received disconnect from 190.173.96.74 port 36140:11: Bye Bye [preauth]
Sep 28 21:14:06 nativespace-cdp sshd[26954]: Disconnected from 190.173.96.74 port 36140 [preauth]
Sep 28 21:16:33 nativespace-cdp sshd[27596]: Connection closed by 159.100.136.21 port 59368 [preauth]
Sep 28 21:21:35 nativespace-cdp sshd[28751]: Connection closed by 159.100.136.21 port 40762 [preauth]
Sep 28 21:26:34 nativespace-cdp sshd[29792]: Connection closed by 159.100.136.21 port 50604 [preauth]
Sep 28 21:31:37 nativespace-cdp sshd[30942]: Connection closed by 159.100.136.21 port 60298 [preauth]
Sep 28 21:36:36 nativespace-cdp sshd[32171]: Connection closed by 159.100.136.21 port 41986 [preauth]
Sep 28 21:41:33 nativespace-cdp sshd[899]: Connection closed by 159.100.136.21 port 51422 [preauth]
Sep 28 21:43:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 21:43:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:43:12 nativespace-cdp sudo[1304]: pam_unix(sudo:session): session closed for user root
Sep 28 21:43:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status brighto1
Sep 28 21:43:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:43:13 nativespace-cdp sudo[1309]: pam_unix(sudo:session): session closed for user root
Sep 28 21:43:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 21:43:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:43:15 nativespace-cdp sudo[1339]: pam_unix(sudo:session): session closed for user root
Sep 28 21:43:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 28 21:43:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:43:16 nativespace-cdp sudo[1343]: pam_unix(sudo:session): session closed for user root
Sep 28 21:43:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 28 21:43:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:43:17 nativespace-cdp sudo[1350]: pam_unix(sudo:session): session closed for user root
Sep 28 21:46:33 nativespace-cdp sshd[2298]: Connection closed by 159.100.136.21 port 60394 [preauth]
Sep 28 21:47:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 21:47:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:47:03 nativespace-cdp sudo[2378]: pam_unix(sudo:session): session closed for user root
Sep 28 21:47:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status kategilpin
Sep 28 21:47:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 21:47:03 nativespace-cdp sudo[2382]: pam_unix(sudo:session): session closed for user root
Sep 28 21:51:33 nativespace-cdp sshd[3529]: Connection closed by 159.100.136.21 port 41930 [preauth]
Sep 28 21:56:36 nativespace-cdp sshd[4606]: Connection closed by 159.100.136.21 port 51816 [preauth]
Sep 28 22:01:33 nativespace-cdp sshd[6112]: Connection closed by 159.100.136.21 port 33048 [preauth]
Sep 28 22:06:34 nativespace-cdp sshd[7060]: Connection closed by 159.100.136.21 port 42744 [preauth]
Sep 28 22:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 22:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:16 nativespace-cdp sudo[7514]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 22:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:16 nativespace-cdp sudo[7517]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 22:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:17 nativespace-cdp sudo[7520]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 22:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:17 nativespace-cdp sudo[7524]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 22:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:20 nativespace-cdp sudo[7527]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:20 nativespace-cdp sudo[7541]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:20 nativespace-cdp sudo[7544]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:20 nativespace-cdp sudo[7547]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:20 nativespace-cdp sudo[7550]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:20 nativespace-cdp sudo[7553]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:20 nativespace-cdp sudo[7556]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 22:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:28 nativespace-cdp sudo[7574]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 22:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:28 nativespace-cdp sudo[7580]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=stephani user-2=leereyn1 user-3=agproduc user-4=still user-5=spectrum user-6=theblack user-7=hodgesonweb user-8=jarvisin user-9=ulsukarm user-10=vantagep user-11=connect9 user-12=athenare user-13=lbscrmod user-14=maflemin user-15=booff user-16=markward user-17=foundation user-18=magichat user-19=hhdugcor user-20=lbhyisi user-21=dickemery123 user-22=ptkxhsbt user-23=martsblo user-24=megacards user-25=musorguk user-26=wilsonsw user-27=strathar user-28=atestord user-29=sarafoundation user-30=brmrjxl user-31=lakesan1 user-32=connectedshoppin user-33=thqkgnbz user-34=accooper user-35=ianrayne user-36=hubmaster user-37=fetch user-38=carsinyo user-39=gilpin user-40=milloyco user-41=elecleis user-42=firstred user-43=highlegh user-44=southlon user-45=clarkass user-46=firstrel user-47=costestimatorco
Sep 28 22:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=opaiscyx user-49=coursemc user-50=ultbcrra user-51=jonhartl user-52=seftvta user-53=firstres user-54=nativene user-55=innovat1 user-56=askhform user-57=stuartge user-58=skyfirec user-59=alexadmin user-60=newstoda user-61=ggaaorgu user-62=belle user-63=bemadonn user-64=bedfords user-65=vivienn1 user-66=firstre2 user-67=oneoarco user-68=battlere user-69=nstriton user-70=brighto1 user-71=dhyana user-72=beauty user-73=darkstar user-74=eatspam user-75=nsceres user-76=fawcettd user-77=burydropin user-78=steve user-79=bwppodcast user-80=zebrapho user-81=asandcoc user-82=sibtoncc user-83=eugincou user-84=courseme user-85=hirefootballgame user-86=cwsocial user-87=howardon user-88=paulmca1 user-89=pugwash user-90=cambria1 user-91=cathski user-92=ninejimm user-93=reliable user-94=nomistakes user-95=hidden user-96=tigerlet user-97=barbersh user-98=isleofwi user-99=smrszyqg user-100=lkpier user-101=steakbridieme
Sep 28 22:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=firstre5 user-103=donnychicago user-104=philmcph user-105=ctedorgu user-106=nscdp user-107=foods user-108=leftie user-109=health2045 user-110=fortunaz user-111=romaldki user-112=outdoorc user-113=hodgsonmail user-114=ranxterc user-115=branko user-116=onlycont user-117=lucy user-118=attlebor user-119=david user-120=careers user-121=nbhavers user-122=chrisdal user-123=mcdermos user-124=jennimil user-125=tomandle user-126=design user-127=stagingerris user-128=dancinggardener user-129=ladburyp user-130=kategilpin user-131=havantho user-132=cath user-133=sketchy user-134=nvihkvu user-135=tstardom user-136=oubpgvbx user-137=what user-138=bakery user-139=crrtipdl user-140=sosevalu user-141=boldover user-142=nove feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 28 22:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 22:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:29 nativespace-cdp sudo[7585]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:30 nativespace-cdp sudo[7592]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0hyK9VZOTXrFZSXp.~
Sep 28 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:30 nativespace-cdp sudo[7596]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0hyK9VZOTXrFZSXp.~'
Sep 28 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:30 nativespace-cdp sudo[7599]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0hyK9VZOTXrFZSXp.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:30 nativespace-cdp sudo[7603]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:30 nativespace-cdp sudo[7606]: pam_unix(sudo:session): session closed for user root
Sep 28 22:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 22:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 22:09:31 nativespace-cdp sudo[7624]: pam_unix(sudo:session): session closed for user root
Sep 28 22:11:33 nativespace-cdp sshd[8161]: Connection closed by 159.100.136.21 port 52168 [preauth]
Sep 28 22:16:36 nativespace-cdp sshd[9433]: Connection closed by 159.100.136.21 port 33108 [preauth]
Sep 28 22:21:33 nativespace-cdp sshd[10440]: Connection closed by 159.100.136.21 port 42582 [preauth]
Sep 28 22:26:33 nativespace-cdp sshd[11452]: Connection closed by 159.100.136.21 port 51970 [preauth]
Sep 28 22:31:33 nativespace-cdp sshd[12848]: Connection closed by 159.100.136.21 port 32978 [preauth]
Sep 28 22:33:41 nativespace-cdp sshd[13151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.206.129  user=david
Sep 28 22:33:43 nativespace-cdp sshd[13151]: Failed password for david from 47.236.206.129 port 37214 ssh2
Sep 28 22:33:43 nativespace-cdp sshd[13151]: Received disconnect from 47.236.206.129 port 37214:11: Bye Bye [preauth]
Sep 28 22:33:43 nativespace-cdp sshd[13151]: Disconnected from 47.236.206.129 port 37214 [preauth]
Sep 28 22:35:16 nativespace-cdp sshd[13544]: Invalid user server from 103.146.52.138 port 57590
Sep 28 22:35:16 nativespace-cdp sshd[13544]: input_userauth_request: invalid user server [preauth]
Sep 28 22:35:16 nativespace-cdp sshd[13544]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 22:35:16 nativespace-cdp sshd[13544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.52.138
Sep 28 22:35:17 nativespace-cdp sshd[13544]: Failed password for invalid user server from 103.146.52.138 port 57590 ssh2
Sep 28 22:35:17 nativespace-cdp sshd[13544]: Received disconnect from 103.146.52.138 port 57590:11: Bye Bye [preauth]
Sep 28 22:35:17 nativespace-cdp sshd[13544]: Disconnected from 103.146.52.138 port 57590 [preauth]
Sep 28 22:36:33 nativespace-cdp sshd[13771]: Connection closed by 159.100.136.21 port 42902 [preauth]
Sep 28 22:38:20 nativespace-cdp sshd[14043]: Invalid user adminftp from 47.236.206.129 port 43506
Sep 28 22:38:20 nativespace-cdp sshd[14043]: input_userauth_request: invalid user adminftp [preauth]
Sep 28 22:38:20 nativespace-cdp sshd[14043]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 22:38:20 nativespace-cdp sshd[14043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.206.129
Sep 28 22:38:22 nativespace-cdp sshd[14043]: Failed password for invalid user adminftp from 47.236.206.129 port 43506 ssh2
Sep 28 22:38:24 nativespace-cdp sshd[14043]: Received disconnect from 47.236.206.129 port 43506:11: Bye Bye [preauth]
Sep 28 22:38:24 nativespace-cdp sshd[14043]: Disconnected from 47.236.206.129 port 43506 [preauth]
Sep 28 22:38:38 nativespace-cdp sshd[14075]: Invalid user anand from 47.236.206.129 port 53294
Sep 28 22:38:38 nativespace-cdp sshd[14075]: input_userauth_request: invalid user anand [preauth]
Sep 28 22:38:38 nativespace-cdp sshd[14075]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 22:38:38 nativespace-cdp sshd[14075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.206.129
Sep 28 22:38:40 nativespace-cdp sshd[14075]: Failed password for invalid user anand from 47.236.206.129 port 53294 ssh2
Sep 28 22:39:02 nativespace-cdp sshd[14171]: Invalid user admin from 103.146.52.138 port 43678
Sep 28 22:39:02 nativespace-cdp sshd[14171]: input_userauth_request: invalid user admin [preauth]
Sep 28 22:39:02 nativespace-cdp sshd[14171]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 22:39:02 nativespace-cdp sshd[14171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.52.138
Sep 28 22:39:04 nativespace-cdp sshd[14171]: Failed password for invalid user admin from 103.146.52.138 port 43678 ssh2
Sep 28 22:39:07 nativespace-cdp sshd[14171]: Received disconnect from 103.146.52.138 port 43678:11: Bye Bye [preauth]
Sep 28 22:39:07 nativespace-cdp sshd[14171]: Disconnected from 103.146.52.138 port 43678 [preauth]
Sep 28 22:39:44 nativespace-cdp sshd[14259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.52.138  user=root
Sep 28 22:39:44 nativespace-cdp sshd[14259]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 22:39:46 nativespace-cdp sshd[14259]: Failed password for root from 103.146.52.138 port 36168 ssh2
Sep 28 22:39:49 nativespace-cdp sshd[14259]: Received disconnect from 103.146.52.138 port 36168:11: Bye Bye [preauth]
Sep 28 22:39:49 nativespace-cdp sshd[14259]: Disconnected from 103.146.52.138 port 36168 [preauth]
Sep 28 22:41:35 nativespace-cdp sshd[14847]: Connection closed by 159.100.136.21 port 52558 [preauth]
Sep 28 22:46:33 nativespace-cdp sshd[16003]: Connection closed by 159.100.136.21 port 34072 [preauth]
Sep 28 22:51:33 nativespace-cdp sshd[17062]: Connection closed by 159.100.136.21 port 43544 [preauth]
Sep 28 22:56:36 nativespace-cdp sshd[18047]: Connection closed by 159.100.136.21 port 53340 [preauth]
Sep 28 23:01:33 nativespace-cdp sshd[19357]: Connection closed by 159.100.136.21 port 34792 [preauth]
Sep 28 23:06:33 nativespace-cdp sshd[20297]: Connection closed by 159.100.136.21 port 44388 [preauth]
Sep 28 23:07:23 nativespace-cdp sshd[20426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.125.149  user=root
Sep 28 23:07:23 nativespace-cdp sshd[20426]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 23:07:26 nativespace-cdp sshd[20426]: Failed password for root from 162.241.125.149 port 56240 ssh2
Sep 28 23:07:26 nativespace-cdp sshd[20426]: Received disconnect from 162.241.125.149 port 56240:11: Bye Bye [preauth]
Sep 28 23:07:26 nativespace-cdp sshd[20426]: Disconnected from 162.241.125.149 port 56240 [preauth]
Sep 28 23:08:55 nativespace-cdp sshd[20644]: Invalid user ubuntu from 151.80.61.151 port 39490
Sep 28 23:08:55 nativespace-cdp sshd[20644]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 23:08:55 nativespace-cdp sshd[20644]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:08:55 nativespace-cdp sshd[20644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.61.151
Sep 28 23:08:57 nativespace-cdp sshd[20644]: Failed password for invalid user ubuntu from 151.80.61.151 port 39490 ssh2
Sep 28 23:09:04 nativespace-cdp sshd[20644]: Received disconnect from 151.80.61.151 port 39490:11: Bye Bye [preauth]
Sep 28 23:09:04 nativespace-cdp sshd[20644]: Disconnected from 151.80.61.151 port 39490 [preauth]
Sep 28 23:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 28 23:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:22 nativespace-cdp sudo[20733]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 28 23:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:22 nativespace-cdp sudo[20736]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 28 23:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:23 nativespace-cdp sudo[20739]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 28 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:23 nativespace-cdp sudo[20747]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 28 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:27 nativespace-cdp sudo[20750]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 28 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:27 nativespace-cdp sudo[20762]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 28 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:27 nativespace-cdp sudo[20765]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 28 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:27 nativespace-cdp sudo[20768]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 28 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:27 nativespace-cdp sudo[20771]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 28 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:27 nativespace-cdp sudo[20774]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 28 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:27 nativespace-cdp sudo[20777]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 28 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:30 nativespace-cdp sudo[20793]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 28 23:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:31 nativespace-cdp sudo[20798]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=alexadmin user-2=skyfirec user-3=innovat1 user-4=stuartge user-5=askhform user-6=nativene user-7=brighto1 user-8=nstriton user-9=firstre2 user-10=vivienn1 user-11=battlere user-12=oneoarco user-13=bedfords user-14=ggaaorgu user-15=belle user-16=newstoda user-17=bemadonn user-18=milloyco user-19=gilpin user-20=elecleis user-21=hubmaster user-22=carsinyo user-23=fetch user-24=accooper user-25=ianrayne user-26=connectedshoppin user-27=thqkgnbz user-28=seftvta user-29=jonhartl user-30=ultbcrra user-31=firstres user-32=coursemc user-33=opaiscyx user-34=firstrel user-35=clarkass user-36=costestimatorco user-37=firstred user-38=southlon user-39=highlegh user-40=martsblo user-41=dickemery123 user-42=ptkxhsbt user-43=lbhyisi user-44=hhdugcor user-45=magichat user-46=brmrjxl user-47=lakesan1
Sep 28 23:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=strathar user-49=sarafoundation user-50=atestord user-51=wilsonsw user-52=musorguk user-53=megacards user-54=jarvisin user-55=spectrum user-56=theblack user-57=hodgesonweb user-58=still user-59=agproduc user-60=stephani user-61=leereyn1 user-62=booff user-63=foundation user-64=markward user-65=connect9 user-66=athenare user-67=vantagep user-68=maflemin user-69=lbscrmod user-70=ulsukarm user-71=tstardom user-72=oubpgvbx user-73=what user-74=sketchy user-75=cath user-76=havantho user-77=nvihkvu user-78=ladburyp user-79=dancinggardener user-80=stagingerris user-81=kategilpin user-82=design user-83=nove user-84=boldover user-85=bakery user-86=sosevalu user-87=crrtipdl user-88=attlebor user-89=lucy user-90=onlycont user-91=outdoorc user-92=hodgsonmail user-93=ranxterc user-94=branko user-95=romaldki user-96=tomandle user-97=jennimil user-98=chrisdal user-99=mcdermos user-100=nbhavers user-101=careers
Sep 28 23:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=david user-103=cathski user-104=cambria1 user-105=ninejimm user-106=reliable user-107=pugwash user-108=howardon user-109=paulmca1 user-110=cwsocial user-111=hirefootballgame user-112=eugincou user-113=courseme user-114=nscdp user-115=fortunaz user-116=health2045 user-117=foods user-118=leftie user-119=lkpier user-120=philmcph user-121=ctedorgu user-122=firstre5 user-123=steakbridieme user-124=donnychicago user-125=smrszyqg user-126=isleofwi user-127=hidden user-128=nomistakes user-129=barbersh user-130=tigerlet user-131=burydropin user-132=fawcettd user-133=nsceres user-134=beauty user-135=eatspam user-136=darkstar user-137=dhyana user-138=sibtoncc user-139=asandcoc user-140=bwppodcast user-141=zebrapho user-142=steve feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 28 23:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 28 23:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:32 nativespace-cdp sudo[20803]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:32 nativespace-cdp sshd[20809]: Invalid user ubuntu from 14.225.213.118 port 36558
Sep 28 23:09:32 nativespace-cdp sshd[20809]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 23:09:32 nativespace-cdp sshd[20809]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:09:32 nativespace-cdp sshd[20809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.118
Sep 28 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:33 nativespace-cdp sudo[20815]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-G5S3tzZz0ihJWwwh.~
Sep 28 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:33 nativespace-cdp sudo[20818]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-G5S3tzZz0ihJWwwh.~'
Sep 28 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:33 nativespace-cdp sudo[20821]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-G5S3tzZz0ihJWwwh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 28 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:33 nativespace-cdp sudo[20826]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 28 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:33 nativespace-cdp sudo[20829]: pam_unix(sudo:session): session closed for user root
Sep 28 23:09:34 nativespace-cdp sshd[20809]: Failed password for invalid user ubuntu from 14.225.213.118 port 36558 ssh2
Sep 28 23:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 28 23:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 28 23:09:34 nativespace-cdp sshd[20809]: Received disconnect from 14.225.213.118 port 36558:11: Bye Bye [preauth]
Sep 28 23:09:34 nativespace-cdp sshd[20809]: Disconnected from 14.225.213.118 port 36558 [preauth]
Sep 28 23:09:34 nativespace-cdp sudo[20850]: pam_unix(sudo:session): session closed for user root
Sep 28 23:10:11 nativespace-cdp sshd[21098]: Invalid user test01 from 51.195.118.78 port 59594
Sep 28 23:10:11 nativespace-cdp sshd[21098]: input_userauth_request: invalid user test01 [preauth]
Sep 28 23:10:11 nativespace-cdp sshd[21098]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:10:11 nativespace-cdp sshd[21098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.118.78
Sep 28 23:10:13 nativespace-cdp sshd[21098]: Failed password for invalid user test01 from 51.195.118.78 port 59594 ssh2
Sep 28 23:10:13 nativespace-cdp sshd[21098]: Received disconnect from 51.195.118.78 port 59594:11: Bye Bye [preauth]
Sep 28 23:10:13 nativespace-cdp sshd[21098]: Disconnected from 51.195.118.78 port 59594 [preauth]
Sep 28 23:11:33 nativespace-cdp sshd[21438]: Connection closed by 159.100.136.21 port 54100 [preauth]
Sep 28 23:11:40 nativespace-cdp sshd[21457]: Invalid user testuser from 189.241.3.14 port 49934
Sep 28 23:11:40 nativespace-cdp sshd[21457]: input_userauth_request: invalid user testuser [preauth]
Sep 28 23:11:40 nativespace-cdp sshd[21457]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:11:40 nativespace-cdp sshd[21457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.241.3.14
Sep 28 23:11:42 nativespace-cdp sshd[21457]: Failed password for invalid user testuser from 189.241.3.14 port 49934 ssh2
Sep 28 23:11:42 nativespace-cdp sshd[21457]: Received disconnect from 189.241.3.14 port 49934:11: Bye Bye [preauth]
Sep 28 23:11:42 nativespace-cdp sshd[21457]: Disconnected from 189.241.3.14 port 49934 [preauth]
Sep 28 23:12:52 nativespace-cdp sshd[21612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.164.194.189  user=root
Sep 28 23:12:52 nativespace-cdp sshd[21612]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 23:12:54 nativespace-cdp sshd[21612]: Failed password for root from 69.164.194.189 port 57468 ssh2
Sep 28 23:12:54 nativespace-cdp sshd[21612]: Received disconnect from 69.164.194.189 port 57468:11: Bye Bye [preauth]
Sep 28 23:12:54 nativespace-cdp sshd[21612]: Disconnected from 69.164.194.189 port 57468 [preauth]
Sep 28 23:13:23 nativespace-cdp sshd[21712]: Invalid user superman from 47.180.114.229 port 59748
Sep 28 23:13:23 nativespace-cdp sshd[21712]: input_userauth_request: invalid user superman [preauth]
Sep 28 23:13:23 nativespace-cdp sshd[21712]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:13:23 nativespace-cdp sshd[21712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.114.229
Sep 28 23:13:26 nativespace-cdp sshd[21712]: Failed password for invalid user superman from 47.180.114.229 port 59748 ssh2
Sep 28 23:13:26 nativespace-cdp sshd[21712]: Received disconnect from 47.180.114.229 port 59748:11: Bye Bye [preauth]
Sep 28 23:13:26 nativespace-cdp sshd[21712]: Disconnected from 47.180.114.229 port 59748 [preauth]
Sep 28 23:13:46 nativespace-cdp sshd[21770]: Did not receive identification string from 162.241.125.149 port 34910
Sep 28 23:13:47 nativespace-cdp sshd[21777]: Invalid user user02 from 151.80.61.151 port 39676
Sep 28 23:13:47 nativespace-cdp sshd[21777]: input_userauth_request: invalid user user02 [preauth]
Sep 28 23:13:47 nativespace-cdp sshd[21777]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:13:47 nativespace-cdp sshd[21777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.61.151
Sep 28 23:13:50 nativespace-cdp sshd[21777]: Failed password for invalid user user02 from 151.80.61.151 port 39676 ssh2
Sep 28 23:13:50 nativespace-cdp sshd[21777]: Received disconnect from 151.80.61.151 port 39676:11: Bye Bye [preauth]
Sep 28 23:13:50 nativespace-cdp sshd[21777]: Disconnected from 151.80.61.151 port 39676 [preauth]
Sep 28 23:13:58 nativespace-cdp sshd[21855]: Invalid user test from 51.195.118.78 port 60464
Sep 28 23:13:58 nativespace-cdp sshd[21855]: input_userauth_request: invalid user test [preauth]
Sep 28 23:13:58 nativespace-cdp sshd[21855]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:13:58 nativespace-cdp sshd[21855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.118.78
Sep 28 23:14:01 nativespace-cdp sshd[21855]: Failed password for invalid user test from 51.195.118.78 port 60464 ssh2
Sep 28 23:14:04 nativespace-cdp sshd[21855]: Received disconnect from 51.195.118.78 port 60464:11: Bye Bye [preauth]
Sep 28 23:14:04 nativespace-cdp sshd[21855]: Disconnected from 51.195.118.78 port 60464 [preauth]
Sep 28 23:14:07 nativespace-cdp sshd[21885]: Invalid user deploy from 14.225.213.118 port 52338
Sep 28 23:14:07 nativespace-cdp sshd[21885]: input_userauth_request: invalid user deploy [preauth]
Sep 28 23:14:07 nativespace-cdp sshd[21885]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:14:07 nativespace-cdp sshd[21885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.118
Sep 28 23:14:07 nativespace-cdp sshd[21889]: Invalid user testuser from 69.164.194.189 port 42264
Sep 28 23:14:07 nativespace-cdp sshd[21889]: input_userauth_request: invalid user testuser [preauth]
Sep 28 23:14:07 nativespace-cdp sshd[21889]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:14:07 nativespace-cdp sshd[21889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.164.194.189
Sep 28 23:14:09 nativespace-cdp sshd[21885]: Failed password for invalid user deploy from 14.225.213.118 port 52338 ssh2
Sep 28 23:14:09 nativespace-cdp sshd[21889]: Failed password for invalid user testuser from 69.164.194.189 port 42264 ssh2
Sep 28 23:14:09 nativespace-cdp sshd[21885]: Received disconnect from 14.225.213.118 port 52338:11: Bye Bye [preauth]
Sep 28 23:14:09 nativespace-cdp sshd[21885]: Disconnected from 14.225.213.118 port 52338 [preauth]
Sep 28 23:14:09 nativespace-cdp sshd[21889]: Received disconnect from 69.164.194.189 port 42264:11: Bye Bye [preauth]
Sep 28 23:14:09 nativespace-cdp sshd[21889]: Disconnected from 69.164.194.189 port 42264 [preauth]
Sep 28 23:14:19 nativespace-cdp sshd[21914]: Invalid user ubuntu from 162.241.125.149 port 52710
Sep 28 23:14:19 nativespace-cdp sshd[21914]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 23:14:19 nativespace-cdp sshd[21914]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:14:19 nativespace-cdp sshd[21914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.125.149
Sep 28 23:14:20 nativespace-cdp sshd[21919]: Invalid user tg from 189.241.3.14 port 50710
Sep 28 23:14:20 nativespace-cdp sshd[21919]: input_userauth_request: invalid user tg [preauth]
Sep 28 23:14:20 nativespace-cdp sshd[21919]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:14:20 nativespace-cdp sshd[21919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.241.3.14
Sep 28 23:14:21 nativespace-cdp sshd[21914]: Failed password for invalid user ubuntu from 162.241.125.149 port 52710 ssh2
Sep 28 23:14:21 nativespace-cdp sshd[21914]: Received disconnect from 162.241.125.149 port 52710:11: Bye Bye [preauth]
Sep 28 23:14:21 nativespace-cdp sshd[21914]: Disconnected from 162.241.125.149 port 52710 [preauth]
Sep 28 23:14:21 nativespace-cdp sshd[21919]: Failed password for invalid user tg from 189.241.3.14 port 50710 ssh2
Sep 28 23:14:25 nativespace-cdp sshd[21919]: Received disconnect from 189.241.3.14 port 50710:11: Bye Bye [preauth]
Sep 28 23:14:25 nativespace-cdp sshd[21919]: Disconnected from 189.241.3.14 port 50710 [preauth]
Sep 28 23:14:25 nativespace-cdp sshd[21942]: Invalid user test from 151.80.61.151 port 39742
Sep 28 23:14:25 nativespace-cdp sshd[21942]: input_userauth_request: invalid user test [preauth]
Sep 28 23:14:25 nativespace-cdp sshd[21942]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:14:25 nativespace-cdp sshd[21942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.61.151
Sep 28 23:14:26 nativespace-cdp sshd[21940]: Invalid user sopuser from 47.180.114.229 port 46596
Sep 28 23:14:26 nativespace-cdp sshd[21940]: input_userauth_request: invalid user sopuser [preauth]
Sep 28 23:14:26 nativespace-cdp sshd[21940]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:14:26 nativespace-cdp sshd[21940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.114.229
Sep 28 23:14:26 nativespace-cdp sshd[21942]: Failed password for invalid user test from 151.80.61.151 port 39742 ssh2
Sep 28 23:14:26 nativespace-cdp sshd[21942]: Received disconnect from 151.80.61.151 port 39742:11: Bye Bye [preauth]
Sep 28 23:14:26 nativespace-cdp sshd[21942]: Disconnected from 151.80.61.151 port 39742 [preauth]
Sep 28 23:14:27 nativespace-cdp sshd[21940]: Failed password for invalid user sopuser from 47.180.114.229 port 46596 ssh2
Sep 28 23:14:28 nativespace-cdp sshd[21940]: Received disconnect from 47.180.114.229 port 46596:11: Bye Bye [preauth]
Sep 28 23:14:28 nativespace-cdp sshd[21940]: Disconnected from 47.180.114.229 port 46596 [preauth]
Sep 28 23:14:36 nativespace-cdp sshd[22010]: Invalid user ubuntu from 51.195.118.78 port 46236
Sep 28 23:14:36 nativespace-cdp sshd[22010]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 23:14:36 nativespace-cdp sshd[22010]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:14:36 nativespace-cdp sshd[22010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.118.78
Sep 28 23:14:38 nativespace-cdp sshd[22010]: Failed password for invalid user ubuntu from 51.195.118.78 port 46236 ssh2
Sep 28 23:14:45 nativespace-cdp sshd[22053]: Invalid user support from 69.164.194.189 port 52972
Sep 28 23:14:45 nativespace-cdp sshd[22053]: input_userauth_request: invalid user support [preauth]
Sep 28 23:14:46 nativespace-cdp sshd[22053]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:14:46 nativespace-cdp sshd[22053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.164.194.189
Sep 28 23:14:47 nativespace-cdp sshd[22053]: Failed password for invalid user support from 69.164.194.189 port 52972 ssh2
Sep 28 23:14:56 nativespace-cdp sshd[22096]: Invalid user username from 14.225.213.118 port 36618
Sep 28 23:14:56 nativespace-cdp sshd[22096]: input_userauth_request: invalid user username [preauth]
Sep 28 23:14:56 nativespace-cdp sshd[22096]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:14:56 nativespace-cdp sshd[22096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.118
Sep 28 23:14:58 nativespace-cdp sshd[22096]: Failed password for invalid user username from 14.225.213.118 port 36618 ssh2
Sep 28 23:15:04 nativespace-cdp sshd[22247]: Invalid user steam from 189.241.3.14 port 35292
Sep 28 23:15:04 nativespace-cdp sshd[22247]: input_userauth_request: invalid user steam [preauth]
Sep 28 23:15:04 nativespace-cdp sshd[22247]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:15:04 nativespace-cdp sshd[22247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.241.3.14
Sep 28 23:15:06 nativespace-cdp sshd[22247]: Failed password for invalid user steam from 189.241.3.14 port 35292 ssh2
Sep 28 23:15:06 nativespace-cdp sshd[22247]: Received disconnect from 189.241.3.14 port 35292:11: Bye Bye [preauth]
Sep 28 23:15:06 nativespace-cdp sshd[22247]: Disconnected from 189.241.3.14 port 35292 [preauth]
Sep 28 23:15:07 nativespace-cdp sshd[22324]: Invalid user ubuntu from 47.180.114.229 port 59152
Sep 28 23:15:07 nativespace-cdp sshd[22324]: input_userauth_request: invalid user ubuntu [preauth]
Sep 28 23:15:07 nativespace-cdp sshd[22324]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:15:07 nativespace-cdp sshd[22324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.114.229
Sep 28 23:15:08 nativespace-cdp sshd[22324]: Failed password for invalid user ubuntu from 47.180.114.229 port 59152 ssh2
Sep 28 23:15:08 nativespace-cdp sshd[22324]: Received disconnect from 47.180.114.229 port 59152:11: Bye Bye [preauth]
Sep 28 23:15:08 nativespace-cdp sshd[22324]: Disconnected from 47.180.114.229 port 59152 [preauth]
Sep 28 23:16:34 nativespace-cdp sshd[22713]: Connection closed by 159.100.136.21 port 35770 [preauth]
Sep 28 23:18:15 nativespace-cdp sshd[22958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.78.84.90  user=root
Sep 28 23:18:15 nativespace-cdp sshd[22958]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 28 23:18:17 nativespace-cdp sshd[22958]: Failed password for root from 181.78.84.90 port 59226 ssh2
Sep 28 23:18:18 nativespace-cdp sshd[22958]: Received disconnect from 181.78.84.90 port 59226:11: Bye Bye [preauth]
Sep 28 23:18:18 nativespace-cdp sshd[22958]: Disconnected from 181.78.84.90 port 59226 [preauth]
Sep 28 23:21:33 nativespace-cdp sshd[23805]: Connection closed by 159.100.136.21 port 45364 [preauth]
Sep 28 23:22:01 nativespace-cdp sshd[23879]: Invalid user postgres from 181.78.84.90 port 42366
Sep 28 23:22:01 nativespace-cdp sshd[23879]: input_userauth_request: invalid user postgres [preauth]
Sep 28 23:22:01 nativespace-cdp sshd[23879]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:22:01 nativespace-cdp sshd[23879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.78.84.90
Sep 28 23:22:03 nativespace-cdp sshd[23879]: Failed password for invalid user postgres from 181.78.84.90 port 42366 ssh2
Sep 28 23:22:03 nativespace-cdp sshd[23879]: Received disconnect from 181.78.84.90 port 42366:11: Bye Bye [preauth]
Sep 28 23:22:03 nativespace-cdp sshd[23879]: Disconnected from 181.78.84.90 port 42366 [preauth]
Sep 28 23:22:51 nativespace-cdp sshd[24001]: Invalid user iptv from 181.78.84.90 port 56860
Sep 28 23:22:51 nativespace-cdp sshd[24001]: input_userauth_request: invalid user iptv [preauth]
Sep 28 23:22:51 nativespace-cdp sshd[24001]: pam_unix(sshd:auth): check pass; user unknown
Sep 28 23:22:51 nativespace-cdp sshd[24001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.78.84.90
Sep 28 23:22:53 nativespace-cdp sshd[24001]: Failed password for invalid user iptv from 181.78.84.90 port 56860 ssh2
Sep 28 23:26:33 nativespace-cdp sshd[24812]: Connection closed by 159.100.136.21 port 55246 [preauth]
Sep 28 23:31:33 nativespace-cdp sshd[26165]: Connection closed by 159.100.136.21 port 36600 [preauth]
Sep 28 23:36:33 nativespace-cdp sshd[27099]: Connection closed by 159.100.136.21 port 46196 [preauth]
Sep 28 23:41:33 nativespace-cdp sshd[28028]: Connection closed by 159.100.136.21 port 55542 [preauth]
Sep 28 23:46:35 nativespace-cdp sshd[29253]: Connection closed by 159.100.136.21 port 36980 [preauth]
Sep 28 23:51:33 nativespace-cdp sshd[30235]: Connection closed by 159.100.136.21 port 46480 [preauth]
Sep 28 23:56:33 nativespace-cdp sshd[31170]: Connection closed by 159.100.136.21 port 55698 [preauth]
Sep 29 00:01:33 nativespace-cdp sshd[32484]: Connection closed by 159.100.136.21 port 36826 [preauth]
Sep 29 00:06:33 nativespace-cdp sshd[1054]: Connection closed by 159.100.136.21 port 46602 [preauth]
Sep 29 00:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 00:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:16 nativespace-cdp sudo[1455]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 00:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:16 nativespace-cdp sudo[1458]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 00:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:17 nativespace-cdp sudo[1461]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 00:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:17 nativespace-cdp sudo[1467]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 00:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:19 nativespace-cdp sudo[1470]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 00:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:19 nativespace-cdp sudo[1479]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 00:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:20 nativespace-cdp sudo[1482]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 00:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:20 nativespace-cdp sudo[1485]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 00:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:20 nativespace-cdp sudo[1489]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 00:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:20 nativespace-cdp sudo[1492]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 00:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:20 nativespace-cdp sudo[1497]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:30 nativespace-cdp sudo[1523]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:31 nativespace-cdp sudo[1528]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=howardon user-2=pugwash user-3=paulmca1 user-4=cwsocial user-5=cathski user-6=cambria1 user-7=reliable user-8=ninejimm user-9=eugincou user-10=courseme user-11=hirefootballgame user-12=lkpier user-13=philmcph user-14=ctedorgu user-15=firstre5 user-16=donnychicago user-17=steakbridieme user-18=nscdp user-19=fortunaz user-20=health2045 user-21=leftie user-22=foods user-23=hidden user-24=nomistakes user-25=tigerlet user-26=barbersh user-27=smrszyqg user-28=isleofwi user-29=nsceres user-30=burydropin user-31=fawcettd user-32=dhyana user-33=beauty user-34=eatspam user-35=darkstar user-36=asandcoc user-37=sibtoncc user-38=steve user-39=bwppodcast user-40=zebrapho user-41=cath user-42=sketchy user-43=havantho user-44=nvihkvu user-45=oubpgvbx user-46=tstardom user-47=what user-48=design user-49=ladburyp
Sep 29 00:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=dancinggardener user-51=stagingerris user-52=kategilpin user-53=boldover user-54=nove user-55=bakery user-56=sosevalu user-57=crrtipdl user-58=onlycont user-59=attlebor user-60=lucy user-61=romaldki user-62=hodgsonmail user-63=ranxterc user-64=outdoorc user-65=branko user-66=jennimil user-67=tomandle user-68=careers user-69=nbhavers user-70=david user-71=chrisdal user-72=mcdermos user-73=dickemery123 user-74=ptkxhsbt user-75=martsblo user-76=magichat user-77=lbhyisi user-78=hhdugcor user-79=strathar user-80=sarafoundation user-81=atestord user-82=lakesan1 user-83=brmrjxl user-84=musorguk user-85=megacards user-86=wilsonsw user-87=spectrum user-88=theblack user-89=hodgesonweb user-90=jarvisin user-91=stephani user-92=leereyn1 user-93=still user-94=agproduc user-95=connect9 user-96=athenare user-97=vantagep user-98=maflemin user-99=lbscrmod user-100=foundation user-101=booff user-102=markward
Sep 29 00:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ulsukarm user-104=alexadmin user-105=skyfirec user-106=nativene user-107=innovat1 user-108=stuartge user-109=askhform user-110=firstre2 user-111=vivienn1 user-112=battlere user-113=oneoarco user-114=brighto1 user-115=nstriton user-116=ggaaorgu user-117=belle user-118=newstoda user-119=bemadonn user-120=bedfords user-121=hubmaster user-122=carsinyo user-123=fetch user-124=gilpin user-125=milloyco user-126=elecleis user-127=connectedshoppin user-128=thqkgnbz user-129=accooper user-130=ianrayne user-131=coursemc user-132=opaiscyx user-133=seftvta user-134=jonhartl user-135=ultbcrra user-136=firstres user-137=firstred user-138=southlon user-139=highlegh user-140=clarkass user-141=firstrel user-142=costestimatorco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 00:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:32 nativespace-cdp sudo[1534]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:32 nativespace-cdp sudo[1541]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-onN36feLpd7OY8np.~
Sep 29 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:32 nativespace-cdp sudo[1544]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-onN36feLpd7OY8np.~'
Sep 29 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:32 nativespace-cdp sudo[1547]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-onN36feLpd7OY8np.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:32 nativespace-cdp sudo[1551]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:32 nativespace-cdp sudo[1555]: pam_unix(sudo:session): session closed for user root
Sep 29 00:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 00:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 00:09:43 nativespace-cdp sudo[1596]: pam_unix(sudo:session): session closed for user root
Sep 29 00:11:34 nativespace-cdp sshd[2093]: Connection closed by 159.100.136.21 port 56014 [preauth]
Sep 29 00:16:33 nativespace-cdp sshd[3423]: Connection closed by 159.100.136.21 port 37440 [preauth]
Sep 29 00:21:36 nativespace-cdp sshd[4355]: Connection closed by 159.100.136.21 port 47112 [preauth]
Sep 29 00:26:35 nativespace-cdp sshd[5280]: Connection closed by 159.100.136.21 port 55284 [preauth]
Sep 29 00:31:33 nativespace-cdp sshd[6580]: Connection closed by 159.100.136.21 port 36624 [preauth]
Sep 29 00:36:33 nativespace-cdp sshd[7543]: Connection closed by 159.100.136.21 port 46404 [preauth]
Sep 29 00:41:33 nativespace-cdp sshd[8508]: Connection closed by 159.100.136.21 port 56022 [preauth]
Sep 29 00:46:33 nativespace-cdp sshd[9689]: Connection closed by 159.100.136.21 port 37574 [preauth]
Sep 29 00:51:36 nativespace-cdp sshd[10701]: Connection closed by 159.100.136.21 port 47156 [preauth]
Sep 29 00:56:33 nativespace-cdp sshd[11640]: Connection closed by 159.100.136.21 port 57080 [preauth]
Sep 29 01:01:33 nativespace-cdp sshd[12978]: Connection closed by 159.100.136.21 port 38240 [preauth]
Sep 29 01:06:33 nativespace-cdp sshd[14018]: Connection closed by 159.100.136.21 port 47754 [preauth]
Sep 29 01:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 01:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:16 nativespace-cdp sudo[14463]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 01:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:16 nativespace-cdp sudo[14467]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 01:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:17 nativespace-cdp sudo[14470]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 01:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:17 nativespace-cdp sudo[14475]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 01:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:19 nativespace-cdp sudo[14479]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 01:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:19 nativespace-cdp sudo[14490]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 01:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:19 nativespace-cdp sudo[14493]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 01:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:19 nativespace-cdp sudo[14496]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 01:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:20 nativespace-cdp sudo[14499]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 01:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:20 nativespace-cdp sudo[14503]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 01:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:20 nativespace-cdp sudo[14506]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 01:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:24 nativespace-cdp sudo[14519]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:25 nativespace-cdp sudo[14524]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=romaldki user-2=ranxterc user-3=hodgsonmail user-4=outdoorc user-5=branko user-6=onlycont user-7=attlebor user-8=lucy user-9=nbhavers user-10=careers user-11=david user-12=chrisdal user-13=mcdermos user-14=jennimil user-15=tomandle user-16=design user-17=ladburyp user-18=dancinggardener user-19=stagingerris user-20=kategilpin user-21=sketchy user-22=cath user-23=havantho user-24=nvihkvu user-25=oubpgvbx user-26=tstardom user-27=what user-28=bakery user-29=sosevalu user-30=crrtipdl user-31=boldover user-32=nove user-33=dhyana user-34=beauty user-35=eatspam user-36=darkstar user-37=nsceres user-38=burydropin user-39=fawcettd user-40=steve user-41=bwppodcast user-42=zebrapho user-43=sibtoncc user-44=asandcoc user-45=eugincou user-46=courseme user-47=hirefootballgame user-48=pugwash user-49=paulmca1
Sep 29 01:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=howardon user-51=cwsocial user-52=cambria1 user-53=cathski user-54=ninejimm user-55=reliable user-56=hidden user-57=nomistakes user-58=barbersh user-59=tigerlet user-60=isleofwi user-61=smrszyqg user-62=lkpier user-63=ctedorgu user-64=philmcph user-65=donnychicago user-66=firstre5 user-67=steakbridieme user-68=nscdp user-69=fortunaz user-70=health2045 user-71=foods user-72=leftie user-73=connectedshoppin user-74=thqkgnbz user-75=accooper user-76=ianrayne user-77=hubmaster user-78=carsinyo user-79=fetch user-80=gilpin user-81=milloyco user-82=elecleis user-83=firstred user-84=southlon user-85=highlegh user-86=clarkass user-87=firstrel user-88=costestimatorco user-89=opaiscyx user-90=coursemc user-91=seftvta user-92=jonhartl user-93=ultbcrra user-94=firstres user-95=nativene user-96=innovat1 user-97=stuartge user-98=askhform user-99=skyfirec user-100=alexadmin user-101=belle user-102=ggaaorgu
Sep 29 01:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=newstoda user-104=bemadonn user-105=bedfords user-106=firstre2 user-107=vivienn1 user-108=battlere user-109=oneoarco user-110=brighto1 user-111=nstriton user-112=stephani user-113=leereyn1 user-114=still user-115=agproduc user-116=spectrum user-117=theblack user-118=hodgesonweb user-119=jarvisin user-120=ulsukarm user-121=athenare user-122=connect9 user-123=vantagep user-124=maflemin user-125=lbscrmod user-126=markward user-127=booff user-128=foundation user-129=magichat user-130=lbhyisi user-131=hhdugcor user-132=dickemery123 user-133=ptkxhsbt user-134=martsblo user-135=musorguk user-136=megacards user-137=wilsonsw user-138=strathar user-139=sarafoundation user-140=atestord user-141=lakesan1 user-142=brmrjxl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 01:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:26 nativespace-cdp sudo[14528]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 01:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:26 nativespace-cdp sudo[14533]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XtGoGZSP7uS1CVKT.~
Sep 29 01:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:26 nativespace-cdp sudo[14536]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XtGoGZSP7uS1CVKT.~'
Sep 29 01:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:26 nativespace-cdp sudo[14540]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XtGoGZSP7uS1CVKT.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 01:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:26 nativespace-cdp sudo[14544]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 01:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:26 nativespace-cdp sudo[14547]: pam_unix(sudo:session): session closed for user root
Sep 29 01:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 01:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 01:09:28 nativespace-cdp sudo[14568]: pam_unix(sudo:session): session closed for user root
Sep 29 01:11:36 nativespace-cdp sshd[15145]: Connection closed by 159.100.136.21 port 57214 [preauth]
Sep 29 01:16:33 nativespace-cdp sshd[16392]: Connection closed by 159.100.136.21 port 38876 [preauth]
Sep 29 01:21:33 nativespace-cdp sshd[17343]: Connection closed by 159.100.136.21 port 48170 [preauth]
Sep 29 01:26:33 nativespace-cdp sshd[18233]: Connection closed by 159.100.136.21 port 57606 [preauth]
Sep 29 01:31:36 nativespace-cdp sshd[19534]: Connection closed by 159.100.136.21 port 38556 [preauth]
Sep 29 01:36:33 nativespace-cdp sshd[20476]: Connection closed by 159.100.136.21 port 48530 [preauth]
Sep 29 01:41:33 nativespace-cdp sshd[21544]: Connection closed by 159.100.136.21 port 58054 [preauth]
Sep 29 01:46:33 nativespace-cdp sshd[22726]: Connection closed by 159.100.136.21 port 39600 [preauth]
Sep 29 01:51:37 nativespace-cdp sshd[23707]: Connection closed by 159.100.136.21 port 49152 [preauth]
Sep 29 02:01:33 nativespace-cdp sshd[25684]: Connection closed by 159.100.136.21 port 39684 [preauth]
Sep 29 02:06:33 nativespace-cdp sshd[26879]: Connection closed by 159.100.136.21 port 49088 [preauth]
Sep 29 02:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 02:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:16 nativespace-cdp sudo[27316]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 02:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:16 nativespace-cdp sudo[27320]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 02:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:17 nativespace-cdp sudo[27323]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 02:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:17 nativespace-cdp sudo[27330]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 02:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:19 nativespace-cdp sudo[27333]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:20 nativespace-cdp sudo[27344]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:20 nativespace-cdp sudo[27347]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:20 nativespace-cdp sudo[27350]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:20 nativespace-cdp sudo[27353]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:20 nativespace-cdp sudo[27356]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:20 nativespace-cdp sudo[27359]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:22 nativespace-cdp sudo[27368]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:22 nativespace-cdp sudo[27372]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=crrtipdl user-2=sosevalu user-3=bakery user-4=boldover user-5=nove user-6=design user-7=kategilpin user-8=stagingerris user-9=dancinggardener user-10=ladburyp user-11=nvihkvu user-12=havantho user-13=sketchy user-14=cath user-15=what user-16=tstardom user-17=oubpgvbx user-18=david user-19=careers user-20=nbhavers user-21=mcdermos user-22=chrisdal user-23=jennimil user-24=tomandle user-25=romaldki user-26=branko user-27=outdoorc user-28=hodgsonmail user-29=ranxterc user-30=onlycont user-31=lucy user-32=attlebor user-33=barbersh user-34=tigerlet user-35=nomistakes user-36=hidden user-37=smrszyqg user-38=isleofwi user-39=donnychicago user-40=firstre5 user-41=steakbridieme user-42=ctedorgu user-43=philmcph user-44=lkpier user-45=foods user-46=leftie user-47=fortunaz user-48=health2045 user-49=nscdp
Sep 29 02:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=courseme user-51=eugincou user-52=hirefootballgame user-53=cwsocial user-54=pugwash user-55=howardon user-56=paulmca1 user-57=ninejimm user-58=reliable user-59=cambria1 user-60=cathski user-61=steve user-62=zebrapho user-63=bwppodcast user-64=sibtoncc user-65=asandcoc user-66=dhyana user-67=darkstar user-68=eatspam user-69=beauty user-70=nsceres user-71=fawcettd user-72=burydropin user-73=bemadonn user-74=newstoda user-75=ggaaorgu user-76=belle user-77=bedfords user-78=oneoarco user-79=battlere user-80=vivienn1 user-81=firstre2 user-82=nstriton user-83=brighto1 user-84=nativene user-85=stuartge user-86=askhform user-87=innovat1 user-88=alexadmin user-89=skyfirec user-90=highlegh user-91=southlon user-92=firstred user-93=costestimatorco user-94=clarkass user-95=firstrel user-96=coursemc user-97=opaiscyx user-98=firstres user-99=ultbcrra user-100=seftvta user-101=jonhartl user-102=thqkgnbz
Sep 29 02:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=connectedshoppin user-104=ianrayne user-105=accooper user-106=fetch user-107=carsinyo user-108=hubmaster user-109=elecleis user-110=milloyco user-111=gilpin user-112=megacards user-113=musorguk user-114=wilsonsw user-115=atestord user-116=sarafoundation user-117=strathar user-118=brmrjxl user-119=lakesan1 user-120=magichat user-121=hhdugcor user-122=lbhyisi user-123=ptkxhsbt user-124=dickemery123 user-125=martsblo user-126=ulsukarm user-127=lbscrmod user-128=maflemin user-129=vantagep user-130=connect9 user-131=athenare user-132=booff user-133=foundation user-134=markward user-135=leereyn1 user-136=stephani user-137=agproduc user-138=still user-139=theblack user-140=hodgesonweb user-141=spectrum user-142=jarvisin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 29 02:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:23 nativespace-cdp sudo[27377]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:24 nativespace-cdp sudo[27383]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pfjWCpo1qVU2bbhc.~
Sep 29 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:24 nativespace-cdp sudo[27386]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pfjWCpo1qVU2bbhc.~'
Sep 29 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:24 nativespace-cdp sudo[27389]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pfjWCpo1qVU2bbhc.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:24 nativespace-cdp sudo[27393]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:24 nativespace-cdp sudo[27396]: pam_unix(sudo:session): session closed for user root
Sep 29 02:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 02:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 02:09:25 nativespace-cdp sudo[27414]: pam_unix(sudo:session): session closed for user root
Sep 29 02:11:33 nativespace-cdp sshd[27943]: Connection closed by 159.100.136.21 port 58660 [preauth]
Sep 29 02:16:35 nativespace-cdp sshd[29216]: Connection closed by 159.100.136.21 port 40278 [preauth]
Sep 29 02:17:46 nativespace-cdp sshd[29389]: Invalid user oracle from 192.210.149.60 port 55136
Sep 29 02:17:46 nativespace-cdp sshd[29389]: input_userauth_request: invalid user oracle [preauth]
Sep 29 02:17:46 nativespace-cdp sshd[29389]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 02:17:46 nativespace-cdp sshd[29389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.210.149.60
Sep 29 02:17:48 nativespace-cdp sshd[29389]: Failed password for invalid user oracle from 192.210.149.60 port 55136 ssh2
Sep 29 02:17:48 nativespace-cdp sshd[29389]: Received disconnect from 192.210.149.60 port 55136:11: Bye Bye [preauth]
Sep 29 02:17:48 nativespace-cdp sshd[29389]: Disconnected from 192.210.149.60 port 55136 [preauth]
Sep 29 02:21:34 nativespace-cdp sshd[30263]: Connection closed by 159.100.136.21 port 49852 [preauth]
Sep 29 02:23:49 nativespace-cdp sshd[30605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.210.149.60  user=root
Sep 29 02:23:49 nativespace-cdp sshd[30605]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 02:23:51 nativespace-cdp sshd[30605]: Failed password for root from 192.210.149.60 port 54500 ssh2
Sep 29 02:23:51 nativespace-cdp sshd[30605]: Received disconnect from 192.210.149.60 port 54500:11: Bye Bye [preauth]
Sep 29 02:23:51 nativespace-cdp sshd[30605]: Disconnected from 192.210.149.60 port 54500 [preauth]
Sep 29 02:25:07 nativespace-cdp sshd[30913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.210.149.60  user=root
Sep 29 02:25:07 nativespace-cdp sshd[30913]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 02:25:08 nativespace-cdp sshd[30913]: Failed password for root from 192.210.149.60 port 38792 ssh2
Sep 29 02:25:08 nativespace-cdp sshd[30913]: Received disconnect from 192.210.149.60 port 38792:11: Bye Bye [preauth]
Sep 29 02:25:08 nativespace-cdp sshd[30913]: Disconnected from 192.210.149.60 port 38792 [preauth]
Sep 29 02:26:33 nativespace-cdp sshd[31270]: Connection closed by 159.100.136.21 port 59862 [preauth]
Sep 29 02:31:33 nativespace-cdp sshd[32573]: Connection closed by 159.100.136.21 port 41328 [preauth]
Sep 29 02:36:33 nativespace-cdp sshd[1147]: Connection closed by 159.100.136.21 port 51198 [preauth]
Sep 29 02:41:33 nativespace-cdp sshd[2183]: Connection closed by 159.100.136.21 port 60932 [preauth]
Sep 29 02:46:33 nativespace-cdp sshd[3280]: Connection closed by 159.100.136.21 port 42540 [preauth]
Sep 29 02:51:33 nativespace-cdp sshd[4422]: Connection closed by 159.100.136.21 port 51520 [preauth]
Sep 29 02:56:35 nativespace-cdp sshd[5405]: Connection closed by 159.100.136.21 port 60916 [preauth]
Sep 29 03:01:36 nativespace-cdp sshd[6552]: Connection closed by 159.100.136.21 port 42098 [preauth]
Sep 29 03:06:33 nativespace-cdp sshd[7619]: Connection closed by 159.100.136.21 port 51830 [preauth]
Sep 29 03:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 03:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:20 nativespace-cdp sudo[8185]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 03:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:20 nativespace-cdp sudo[8188]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 03:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:22 nativespace-cdp sudo[8191]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 03:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:22 nativespace-cdp sudo[8197]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 03:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:24 nativespace-cdp sudo[8200]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 03:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:24 nativespace-cdp sudo[8210]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 03:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:24 nativespace-cdp sudo[8213]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 03:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:24 nativespace-cdp sudo[8217]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 03:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:24 nativespace-cdp sudo[8220]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 03:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:24 nativespace-cdp sudo[8223]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 03:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:24 nativespace-cdp sudo[8226]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:26 nativespace-cdp sudo[8236]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:26 nativespace-cdp sudo[8241]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bakery user-2=crrtipdl user-3=sosevalu user-4=boldover user-5=nove user-6=design user-7=stagingerris user-8=dancinggardener user-9=ladburyp user-10=kategilpin user-11=havantho user-12=cath user-13=sketchy user-14=nvihkvu user-15=tstardom user-16=oubpgvbx user-17=what user-18=david user-19=careers user-20=nbhavers user-21=chrisdal user-22=mcdermos user-23=jennimil user-24=tomandle user-25=romaldki user-26=hodgsonmail user-27=ranxterc user-28=outdoorc user-29=branko user-30=onlycont user-31=lucy user-32=attlebor user-33=nomistakes user-34=hidden user-35=barbersh user-36=tigerlet user-37=smrszyqg user-38=isleofwi user-39=lkpier user-40=steakbridieme user-41=firstre5 user-42=donnychicago user-43=ctedorgu user-44=philmcph user-45=nscdp user-46=foods user-47=leftie user-48=fortunaz user-49=health2045
Sep 29 03:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=eugincou user-51=courseme user-52=hirefootballgame user-53=cwsocial user-54=paulmca1 user-55=pugwash user-56=howardon user-57=cathski user-58=cambria1 user-59=ninejimm user-60=reliable user-61=steve user-62=bwppodcast user-63=zebrapho user-64=sibtoncc user-65=asandcoc user-66=dhyana user-67=beauty user-68=darkstar user-69=eatspam user-70=nsceres user-71=fawcettd user-72=burydropin user-73=newstoda user-74=belle user-75=ggaaorgu user-76=bemadonn user-77=bedfords user-78=vivienn1 user-79=firstre2 user-80=oneoarco user-81=battlere user-82=nstriton user-83=brighto1 user-84=nativene user-85=innovat1 user-86=askhform user-87=stuartge user-88=skyfirec user-89=alexadmin user-90=firstred user-91=highlegh user-92=southlon user-93=clarkass user-94=firstrel user-95=costestimatorco user-96=opaiscyx user-97=coursemc user-98=ultbcrra user-99=jonhartl user-100=seftvta user-101=firstres user-102=connectedshoppin
Sep 29 03:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=thqkgnbz user-104=accooper user-105=ianrayne user-106=hubmaster user-107=fetch user-108=carsinyo user-109=gilpin user-110=milloyco user-111=elecleis user-112=megacards user-113=musorguk user-114=wilsonsw user-115=strathar user-116=atestord user-117=sarafoundation user-118=brmrjxl user-119=lakesan1 user-120=magichat user-121=hhdugcor user-122=lbhyisi user-123=dickemery123 user-124=ptkxhsbt user-125=martsblo user-126=ulsukarm user-127=vantagep user-128=athenare user-129=connect9 user-130=lbscrmod user-131=maflemin user-132=booff user-133=foundation user-134=markward user-135=stephani user-136=leereyn1 user-137=agproduc user-138=still user-139=spectrum user-140=theblack user-141=hodgesonweb user-142=jarvisin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 03:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:27 nativespace-cdp sudo[8248]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 03:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:28 nativespace-cdp sudo[8256]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BPfSS4LxFFePHAQh.~
Sep 29 03:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:28 nativespace-cdp sudo[8259]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BPfSS4LxFFePHAQh.~'
Sep 29 03:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:28 nativespace-cdp sudo[8262]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BPfSS4LxFFePHAQh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 03:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:28 nativespace-cdp sudo[8266]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 03:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:28 nativespace-cdp sudo[8269]: pam_unix(sudo:session): session closed for user root
Sep 29 03:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 03:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 03:09:30 nativespace-cdp sudo[8291]: pam_unix(sudo:session): session closed for user root
Sep 29 03:11:33 nativespace-cdp sshd[8761]: Connection closed by 159.100.136.21 port 33256 [preauth]
Sep 29 03:16:35 nativespace-cdp sshd[10092]: Connection closed by 159.100.136.21 port 42930 [preauth]
Sep 29 03:21:33 nativespace-cdp sshd[11107]: Connection closed by 159.100.136.21 port 52076 [preauth]
Sep 29 03:26:33 nativespace-cdp sshd[12032]: Connection closed by 159.100.136.21 port 33466 [preauth]
Sep 29 03:31:33 nativespace-cdp sshd[13367]: Connection closed by 159.100.136.21 port 43136 [preauth]
Sep 29 03:36:36 nativespace-cdp sshd[14282]: Connection closed by 159.100.136.21 port 52606 [preauth]
Sep 29 03:39:22 nativespace-cdp sshd[14886]: Connection closed by 167.94.146.61 port 46372 [preauth]
Sep 29 03:41:33 nativespace-cdp sshd[15392]: Connection closed by 159.100.136.21 port 33870 [preauth]
Sep 29 03:46:33 nativespace-cdp sshd[16630]: Connection closed by 159.100.136.21 port 43498 [preauth]
Sep 29 03:51:33 nativespace-cdp sshd[17589]: Connection closed by 159.100.136.21 port 53008 [preauth]
Sep 29 03:56:36 nativespace-cdp sshd[18564]: Connection closed by 159.100.136.21 port 34028 [preauth]
Sep 29 04:01:33 nativespace-cdp sshd[19895]: Connection closed by 159.100.136.21 port 43742 [preauth]
Sep 29 04:04:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 04:04:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:04:03 nativespace-cdp sudo[20346]: pam_unix(sudo:session): session closed for user root
Sep 29 04:06:33 nativespace-cdp sshd[20825]: Connection closed by 159.100.136.21 port 53046 [preauth]
Sep 29 04:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 04:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:15 nativespace-cdp sudo[21329]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 04:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:15 nativespace-cdp sudo[21332]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 04:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:16 nativespace-cdp sudo[21335]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 04:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:16 nativespace-cdp sudo[21342]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 04:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:19 nativespace-cdp sudo[21346]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 04:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:19 nativespace-cdp sudo[21357]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 04:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:19 nativespace-cdp sudo[21360]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 04:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:19 nativespace-cdp sudo[21363]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 04:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:19 nativespace-cdp sudo[21366]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 04:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:19 nativespace-cdp sudo[21369]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 04:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:19 nativespace-cdp sudo[21372]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 04:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:21 nativespace-cdp sudo[21381]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 04:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:21 nativespace-cdp sudo[21386]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hhdugcor user-2=lbhyisi user-3=magichat user-4=martsblo user-5=ptkxhsbt user-6=dickemery123 user-7=wilsonsw user-8=megacards user-9=musorguk user-10=brmrjxl user-11=lakesan1 user-12=atestord user-13=sarafoundation user-14=strathar user-15=agproduc user-16=still user-17=leereyn1 user-18=stephani user-19=jarvisin user-20=hodgesonweb user-21=theblack user-22=spectrum user-23=ulsukarm user-24=foundation user-25=booff user-26=markward user-27=lbscrmod user-28=maflemin user-29=vantagep user-30=athenare user-31=connect9 user-32=stuartge user-33=askhform user-34=innovat1 user-35=nativene user-36=alexadmin user-37=skyfirec user-38=bedfords user-39=bemadonn user-40=newstoda user-41=ggaaorgu user-42=belle user-43=nstriton user-44=brighto1 user-45=oneoarco user-46=battlere user-47=vivienn1 user-48=firstre2
Sep 29 04:09:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ianrayne user-50=accooper user-51=thqkgnbz user-52=connectedshoppin user-53=elecleis user-54=milloyco user-55=gilpin user-56=fetch user-57=carsinyo user-58=hubmaster user-59=costestimatorco user-60=firstrel user-61=clarkass user-62=highlegh user-63=southlon user-64=firstred user-65=firstres user-66=ultbcrra user-67=seftvta user-68=jonhartl user-69=coursemc user-70=opaiscyx user-71=hirefootballgame user-72=courseme user-73=eugincou user-74=ninejimm user-75=reliable user-76=cambria1 user-77=cathski user-78=cwsocial user-79=pugwash user-80=paulmca1 user-81=howardon user-82=isleofwi user-83=smrszyqg user-84=tigerlet user-85=barbersh user-86=nomistakes user-87=hidden user-88=foods user-89=leftie user-90=fortunaz user-91=health2045 user-92=nscdp user-93=firstre5 user-94=donnychicago user-95=steakbridieme user-96=ctedorgu user-97=philmcph user-98=lkpier user-99=darkstar user-100=eatspam user-101=beauty
Sep 29 04:09:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=fawcettd user-104=burydropin user-105=nsceres user-106=zebrapho user-107=bwppodcast user-108=steve user-109=asandcoc user-110=sibtoncc user-111=kategilpin user-112=stagingerris user-113=dancinggardener user-114=ladburyp user-115=design user-116=what user-117=oubpgvbx user-118=tstardom user-119=nvihkvu user-120=havantho user-121=sketchy user-122=cath user-123=crrtipdl user-124=sosevalu user-125=bakery user-126=nove user-127=boldover user-128=branko user-129=hodgsonmail user-130=ranxterc user-131=outdoorc user-132=romaldki user-133=lucy user-134=attlebor user-135=onlycont user-136=mcdermos user-137=chrisdal user-138=david user-139=nbhavers user-140=careers user-141=tomandle user-142=jennimil feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 04:09:21 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 04:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:22 nativespace-cdp sudo[21391]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 04:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:22 nativespace-cdp sudo[21408]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-87dueU0iL1v5jrLy.~
Sep 29 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:23 nativespace-cdp sudo[21412]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-87dueU0iL1v5jrLy.~'
Sep 29 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:23 nativespace-cdp sudo[21415]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-87dueU0iL1v5jrLy.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:23 nativespace-cdp sudo[21419]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:23 nativespace-cdp sudo[21422]: pam_unix(sudo:session): session closed for user root
Sep 29 04:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 04:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:09:24 nativespace-cdp sudo[21441]: pam_unix(sudo:session): session closed for user root
Sep 29 04:10:39 nativespace-cdp sshd[21831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.35.16  user=root
Sep 29 04:10:39 nativespace-cdp sshd[21831]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 04:10:40 nativespace-cdp sshd[21831]: Failed password for root from 20.197.35.16 port 49690 ssh2
Sep 29 04:10:40 nativespace-cdp sshd[21831]: Received disconnect from 20.197.35.16 port 49690:11: Bye Bye [preauth]
Sep 29 04:10:40 nativespace-cdp sshd[21831]: Disconnected from 20.197.35.16 port 49690 [preauth]
Sep 29 04:11:33 nativespace-cdp sshd[21988]: Connection closed by 159.100.136.21 port 33666 [preauth]
Sep 29 04:15:50 nativespace-cdp sshd[23064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.35.16  user=david
Sep 29 04:15:53 nativespace-cdp sshd[23064]: Failed password for david from 20.197.35.16 port 55756 ssh2
Sep 29 04:15:53 nativespace-cdp sshd[23064]: Received disconnect from 20.197.35.16 port 55756:11: Bye Bye [preauth]
Sep 29 04:15:53 nativespace-cdp sshd[23064]: Disconnected from 20.197.35.16 port 55756 [preauth]
Sep 29 04:16:36 nativespace-cdp sshd[23246]: Connection closed by 159.100.136.21 port 42922 [preauth]
Sep 29 04:16:41 nativespace-cdp sshd[23255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.35.16  user=root
Sep 29 04:16:41 nativespace-cdp sshd[23255]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 04:16:43 nativespace-cdp sshd[23255]: Failed password for root from 20.197.35.16 port 34028 ssh2
Sep 29 04:16:43 nativespace-cdp sshd[23255]: Received disconnect from 20.197.35.16 port 34028:11: Bye Bye [preauth]
Sep 29 04:16:43 nativespace-cdp sshd[23255]: Disconnected from 20.197.35.16 port 34028 [preauth]
