chown pollybar:pollybar cpmove-pollybar.tar.gz
#1706438457
/scripts/whoowns kingsmedicalservices.co.uk
#1706438470
df -h
#1706438474
cd mnt
#1706438474
dir
#1706438477
cd /mnt
#1706438477
dir
#1706438479
du -sh
#1706438485
exit
#1706532815
csf -g  109.153.96.183
#1706532844
csf -g 109.153.96.183
#1706532848
grep -i 109.153.96.183 /var/log/lfd.log
#1706532849
grep -i 109.153.96.183 /var/log/lfd
#1706533623
exit
#1706536388
exigrep u16girls@havanthockeyclub.org.uk /var/log/exim_mainlog
#1706536393
grep 024-01-29 11:08:23 1rUPUy-00039x-22 H=bid48kg.bf01.hubspotstarter.net [158.247.28.14]:15481 Warning: "SpamAssassin as havantho detected message as NOT spam (-6.3)"
#1706536393
2024-01-29 11:08:23 1rUPUy-00039x-22 <= 1axcgjgq2uzbym9lequsb5mfjhqho6lw31akwz@bf01.hubspotstarter.net H=bid48kg.bf01.hubspotstarter.net [158.247.28.14]:15481 P=esmtps X=TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no S=112958 id=1706526334000.4def6c19-b366-4846-9cae-15d316a6395d@bf01.hubspotstarter.net T="The Best Of SC4 Carpenters 2023 Carpentry Projects\240" for u16girls@havanthockeyclub.org.uk
#1706536393
2024-01-29 11:08:23 1rUPUy-00039x-22 => u16girls <u16girls@havanthockeyclub.org.uk> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <u16girls@havanthockeyclub.org.uk> IMsFFCeHt2XMLQAA2zQ2/w Saved"
#1706536399
grep u16girls@havanthockeyclub.org.uk /var/log/mailog
#1706536400
grep u16girls@havanthockeyclub.org.uk /var/log/maillog
#1706536414
csf -a 109.153.96.183
#1706536421
echo 109.153.96.183 >> /etc/csf/csf.ignore
#1706536421
csf -x
#1706536422
csf -df
#1706536425
csf -e
#1706536428
csf -df
#1706536618
csf -tf
#1706543866
exit
#1706566058
to
#1706566059
top
#1706566063
free -ht
#1706566064
df -h
#1707073709
mysql -V
#1707073881
csf -g
#1707073884
df -h
#1707073889
cd /home
#1707073890
dir
#1707073893
ls -lahtr
#1707073820
/scripts/pkgacct accooper
#1707076686
ls -lahtr
#1707076688
cd /home
#1707076689
dir
#1707076690
ls -lahtr
#1707076692
history |grep rsync
#1707076711
rsync -e "ssh -p8078" -avrtuP cpmove-accooper.tar.gz root@192.168.0.13:/home
#1707076717
history |grep less
#1707076720
less /root/.ssh/id_rsa.pub
#1707076793
rsync -e "ssh -p8078" -avrtuP cpmove-accooper.tar.gz root@192.168.0.13:/home
#1707077678
history |grep restore
#1707078209
cd /etc/apache2/logs
#1707078211
grep -inr accooper
#1707078310
grep -inr 185.67.178.249
#1707121583
cd /home/
#1707121583
dir
#1707121584
ls -lahtr
#1707121588
cd /backup
#1707121589
dir
#1707121593
cd /mnt
#1707121594
dir
#1707121595
ls -lahtr
#1707121597
cd 2024-02-02
#1707121598
dir
#1707121599
ls -lahtr
#1707121600
cd accounts
#1707121601
dir
#1707121602
ls -lahtr
#1707121609
ls -lahtr |grep acco
#1707121615
history |grep rsync
#1707121622
 rsync -e "ssh -p8078" -avrtuP accooper.tar.gz root@192.168.0.13:/home
#1707127973
cat /etc/hosts
#1707127975
history
#1707127982
 /scripts/pkgacct abikreme
#1707128076
history |grep rsync
#1707128079
cd /home
#1707128081
cpmove-abikreme.tar.gz
#1707128089
 rsync -e "ssh -p8078" -avrtuP cpmove-abikreme.tar.gz root@192.168.0.13:/home
#1707128483
exit
#1707125241
cd /home/accopper
#1707125242
cd /home/accoper
#1707125243
dir
#1707125244
cd /home
#1707125244
dir
#1707125246
ls -lahtr
#1707125249
cd accooper
#1707125250
dir
#1707125251
ls -lahtr
#1707125256
ls -lahtr |grep sql
#1707125260
cd www
#1707125261
di
#1707125262
dir
#1707125263
ls -lahtr
#1707125267
cat .htaccess
#1707125272
cd system
#1707125276
ls -lahtr
#1707125284
grep -inr accooper_
#1707128486
exit
#1707170214
top
#1707170224
service pdns status
#1707170240
killall httpd
#1707170243
top
#1707170986
rsync -e "ssh -p 8078" -avrt /home/accooper/mail/*  root@192.168.0.13:/home/accooper/mail/
#1707168370
/scripts/whoowns walmsleyshaw.co.uk
#1707168382
df
#1707168392
csf -g 45.152.28.52
#1707168395
csf -dr 45.152.28.52
#1707168398
csf -a 45.152.28.52
#1707168406
echo 45.152.28.52 > /etc/csf/csf.ignore
#1707168413
grep -i 45.152.28.52 /var/log/maillog
#1707168434
/scripts/whoowns walmsleyshaw.co.uk
#1707168438
ncdu /home/crrtipdl
#1707233307
/usr/local/cpanel/cpanel -S
#1707233373
exinext vgezim@gmail.com
#1707237731
exit
#1707292765
cd mnt
#1707292769
cd /mnt
#1707292769
dir
#1707292775
cd 2024-02-02/accounts
#1707292776
dir
#1707292779
ls -lahtr 
#1707292782
ncdu
#1707292788
pwd
#1707292882
ln -s /mnt/2024-02-02/accounts/crrtipdl.tar.gz /home/crrtipdl/public_html/crrtipdl.tar.gz
#1707292893
chmod 0644 crrtipdl.tar.gz
#1707292956
cd /home/crrtipdl/public_html/
#1707292958
ls -lahtr
#1707292986
chown crrtipdl:crrtipdl crrtipdl.tar.gz
#1707292988
ls -lahtr
#1707292996
cd /mnt/2024-02-02/accounts/
#1707293002
chown crrtipdl:crrtipdl crrtipdl.tar.gz
#1707293052
cd /home/crrtipdl/www
#1707293057
rm crrtipdl.tar.gz
#1707293064
cd /var/www/vhosts
#1707293067
cd /var/www/html
#1707293085
ln -s /mnt/2024-02-02/accounts/crrtipdl.tar.gz /var/www/html/crrtipdl.tar.gz
#1707293447
exit
#1707324506
csf -g 87.115.192.191
#1707324851
csf -a 87.115.192.191
#1707324858
echo 87.115.192.191 >> /etc/csf/csf.ignore
#1707324859
csf -r
#1707434772
exim -bp
#1707434775
exim -bpc
#1707434776
exim -bp
#1707434779
pwnmail 1
#1707434783
history |grep exim
#1707434862
exim -bp | awk '/^ *[0-9]+[mhd]/{print "exim -Mrm " $3}' | bash
#1707436124
top
#1707436133
dmesg
#1707436136
dmesg |grep error
#1707436140
df
#1707436167
killall httpd
#1707436349
service httpd status
#1707436355
service httpd restart
#1707436426
top
#1707438215
csf -g 13.87.70.233
#1707438218
csf -dr 13.87.70.233
#1707438221
csf -a 13.87.70.233
#1707438228
echo 13.87.70.233 /etc/csf/csf.ignore
#1707438232
echo 13.87.70.233 >> /etc/csf/csf.ignore
#1707438233
csf -r
#1707913417
csf -g  101.56.99.33 
#1707913420
csf -dr 101.56.99.33 
#1707913422
csf -a  101.56.99.33 
#1707913429
echo  101.56.99.33  >> /etc/csf/csf.ignore
#1707913431
csf -x
#1707913433
csf -e
#1708379662
top
#1708379671
lsof -p32004
#1708379681
/scripts/suspendacct hhdugcor
#1708380046
top
#1708431933
killall httpd
#1708431937
service httpd restart
#1708432503
exit
#1708534482
exim -bpc
#1708534483
exim -bp
#1708534484
pwnmail 1
#1709654974
cd /home
#1709654974
di
#1709654975
dir
#1709654976
ls -lahtr
#1709654980
cd mnt
#1709654981
dir
#1709654982
ls -lahtr
#1709654983
df -h
#1709654987
cd /mnt
#1709654988
dir
#1709654989
ls -lahtr
#1709654992
cd 2024-03-01
#1709654992
dir
#1709654993
ls -lahtr
#1709654994
cd accounts
#1709654994
dir
#1709654995
ls -lahtr
#1709654998
ncdu
#1709655004
df -h
#1709655014
cp -rf crrtipdl.tar.gz /home/
#1709725554
cd /home
#1709725554
dir
#1709725555
ls- lahtr
#1709725556
ls -lahtr
#1709725557
df -h
#1709725568
rm cpmove-accooper.tar.gz cpmove-accooper.tar.gz
#1709725574
rm cpmove-abikreme.tar.gz
#1709725577
df -h
#1709725590
cd /backup
#1709725590
dir
#1709725594
cd /mnt
#1709725595
dir
#1709725602
cd 2024-03-01/accounts
#1709725602
dir
#1709725605
ls -lathr
#1709725608
mkdir bk
#1709725611
ncdu
#1709725615
mv crrtipdl.tar.gz bk
#1709725617
cd bk
#1709725617
dir
#1709725618
ls -lahtr
#1709809654
df
#1709809658
exit
#1710322153
mysql -V
#1710412167
cd /home
#1710412168
dir
#1710412168
ls -lahtr
#1710412174
df -h
#1710412185
cd /mnt
#1710412186
dir
#1710412186
ls -lahtr
#1710412189
cd 2024-03-08
#1710412189
dir
#1710412190
ls -lahtjr
#1710412192
cd accounts
#1710412192
dir
#1710412193
ls -lahtr
#1710412205
ls -lahtr /home
#1710412209
dir
#1710412213
ls -lahtr |grep crr
#1710412220
mv crrtipdl.tar.gz crrtipdl_09.tar.gz
#1710412221
pwd
#1710412235
cp -rf /home/crrtipdl.tar.gz /mnt/2024-03-08/accounts/
#1710413454
cd /mnt/accounts
#1710413467
dir
#1710413467
ls- lahtr
#1710413470
cd 2024-03-08
#1710413479
cd /mnt
#1710413480
dir
#1710413494
cd 2024-03-08/accounts
#1710413506
dir
#1710413551
ls -lahtr
#1710414567
mkdir bk 
#1710414570
mv crrtipdl.tar.gz bk
#1710414572
cd bk
#1710414572
dir
#1710414584
tar -xzvf crrtipdl.tar.gz
#1710426649
pwd
#1710426650
ls -lahtr
#1710426656
cd crrtipdl
#1710426657
dir
#1710426658
ls -lahtr
#1710426659
cd mail
#1710426660
cd homedir
#1710426661
dir
#1710426662
ls -lahtr
#1710426687
dir mail
#1710426697
dir mail/walmsleyshaw.co.uk
#1710426713
dir mail/walmsleyshaw.co.uk/martin.shaw
#1710426718
du -sh mail/walmsleyshaw.co.uk/martin.shaw
#1710426771
pwd
#1710426816
rsync -avrtPH mail/walmsleyshaw.co.uk/martin.shaw/*  /home/crrtipdl/mail/walmsleyshaw.co.uk/martin.shaw/
#1710429202
du -sh /home/crrtipdl/mail/walmsleyshaw.co.uk/martin.shaw
#1710429242
for user in $(whmapi1 listaccts | awk '/user:/ {print $2}'); do domain=$(whmapi1 accountsummary user=$user | awk '/domain:/ {print $2}'); assignedip=$(whmapi1 accountsummary user=$user | awk '/ip:/ {print$2}') ; dnsip=$(dig +short $domain); dnsmx=$(dig MX +short $domain @8.8.8.8 | awk '{print $2}' | xargs dig +short); if [[ $dnsip != $assignedip ]]; then echo -n "$user:$domain - A - FAILS"; if [[ "$dnsmx" == "$assignedip" ]]; then echo -e " but MX for $user:$domain does point locally"; else echo ""; fi; fi ; done
#1710441649
ip addr show 
#1710441654
ssh 192.168.0.21
#1710441851
csf -d 185.128.25.0/24 #do not delete
#1710441876
ssh 192.168.0.21 -p8078
#1710445635
exit
#1710671971
mysql -v
#1710671975
exit
#1710780741
exim -bpc
#1710780741
exim -bp
#1710780742
pwnmail 1
#1711271743
exim -bpc
#1711271744
exim -bp
#1711271749
pwnmail root
#1711271755
pwnmail 1
#1711271757
exim -bpc
#1711271760
history |grep exim
#1711271763
exim -bp | awk '/^ *[0-9]+[mhd]/{print "exim -Mrm " $3}' | bash
#1711271904
exit
#1711535936
top
#1711535939
df
#1711535940
free -ht
#1711535942
top
#1711535947
exit
#1711715099
to
#1711715100
top
#1711715111
killall httpd
#1711715114
service httpd restart
#1711751651
csf -g 46.99.48.252
#1711751662
csf -dr 46.99.48.252
#1711751663
csf -a 46.99.48.252
#1711751669
echo 46.99.48.252 >> /etc/csf/csf.ignore
#1711751672
csf -x
#1711751674
csf -r
#1711751678
csf -e
#1711751684
grep -i 46.99.48.252 /var/log/maillog
#1711751690
grep -i 46.99.48.252 /var/log/maillog |grep fail
#1711756310
cd /etc/apache2/logs
#1711756312
tail -f error_log
#1711756320
service httpd restart
#1711975488
top
#1711975511
lsof -i4TCP:443,80
#1711975533
csf -d 194.48.251.0/24 #do not delete
#1711975559
csf -d 47.76.209.0/24 #do not delete
#1711975578
csf -d 20.171.152.128:
#1711975587
cd /etc/apache2/logs
#1711975589
tail -f error_log
#1711975612
csf -d 109.70.100.69 #do not delete
#1711975628
csf -d 40.77.167.0/24 #do not delete
#1711975640
csf -d 87.236.176.29/24 #do not delete
#1711975644
service httpd restart
#1711975680
exit
#1712096936
killall httpd
#1712096938
servyce mysqld restart
#1712096942
service mysqld restart
#1712097058
service httpd restart
#1712128173
exit
#1712437786
bash <(curl -s http://69.90.66.110/~gezim084/fixperms.sh) -a elizabet
#1712437825
mysq -lv
#1712437826
mysql -v
#1712508023
cd /home/backup
#1712508026
/scripts/whoowns elizabethbarr.co.uk
#1712508029
cd /home/backup
#1712508031
cd mnt
#1712508031
dir
#1712508033
df
#1712508036
cd /mnt
#1712508037
dir
#1712508038
ls -lahtr
#1712508039
cd 2024-04-05
#1712508040
dir
#1712508043
cd accounts
#1712508047
ls |grep eliz
#1712508051
du -sh elizabet.tar.gz
#1712508060
history |grep pkg
#1712508069
/scripts/restorepkg elizabet
#1712508083
/scripts/pkgacct elizabet
#1712508506
history |grep rsync
#1712508521
 rsync -e "ssh -p8078" -avrtuP /home/cpmove-elizabet.tar.gz root@192.168.0.13:/home
#1713217282
df
#1713217286
cd /home
#1713217286
dir
#1713217287
ls -lahtr
#1713217298
rm -rf *.tar.gz
#1713217299
df
#1713217302
cd /home
#1713217302
dir
#1713217303
ls -lahtr
#1713217304
ncdu
#1713219150
df
#1713219151
exit
#1713361379
top
#1713361396
cd /home
#1713361396
dir
#1713361401
ls -lahtr
#1713361412
service httpd stop
#1713361474
service mysqld stop
#1713362121
service httpd status
#1713362124
service httpd start
#1713362135
service mysqld status
#1713362819
exit
#1713362831
top
#1713362835
service mysqld status
#1713362837
service httpd statu
#1713362839
service httpd status
#1713362841
service mysqld restart
#1713362861
service httpd restart
#1713362867
exit
#1713531327
futja
#1713531333
service httpd restart
#1713531431
service mysqld restart
#1713541115
export TERM=vt100 && export PS1="[CL_SSH_ACCESS]# "
#1713541115
echo "user_id=${EUID}"
#1713542547
rpm -e --nodeps --justdb alt-python27-cllib
#1713542578
yum clean all
#1713542587
yum makecache
#1713542737
yum update
#1713543359
uname -rs
#1713543367
rhn_check
#1713543378
rpm -qa |grep kernel
#1713543397
df -h
#1713543568
cat /etc/default/grub 
#1713543577
vi /etc/default/grub 
#1713543654
grub2-mkconfig -o /etc/grub2.cfg
#1713543666
awk -F\' '$1=="menuentry " {print i++ " =  "$2}' /etc/grub2.cfg
#1713543899
grub2-set-default 4
#1713544028
grubby --default-kernel
#1713544044
grubby --info=ALL | grep ^kernel
#1713544067
vi /etc/default/grub
#1713544086
grub2-mkconfig -o /etc/grub2.cfg
#1713544115
uname prs
#1713544119
uname -rs
#1713544277
top
#1713544285
uptime
#1713545231
uname -rs
#1713545560
exit
#1713549433
uname -rs
#1713549437
yum clean all
#1713549443
yum update cloudlinux-release
#1713549485
yum update
#1713549497
rhn_check
#1713549643
yum install [root@nativespace-cdp ~]#
#1713549659
yum install 
#1713549659
 * cpanel-plugins: 185.15.22.168
#1713549694
yum install rhn_check
#1713549979
yum install rhn-setup
#1713549989
yum reinstall rhn-setup
#1713550006
vi /etc/yum.conf
#1713550025
yum reinstall rhn-setup
#1713550073
yum install wget -y
#1713550082
wget https://repo.cloudlinux.com/cloudlinux/sources/cln/cldeploy
#1713550100
bash cldeploy -k 13765-fd2cf92c016f14bca1f911b31115ec5f
#1713548710
service zabbix-agent restart
#1713548723
yum install cagefs
#1713548728
dnf install cagefs
#1713548732
cagefsctl --init
#1713548741
cagefsctl --enable-all
#1713548827
history |grep depl
#1713551019
shutdown -r now
#1713555141
df
#1713555144
exit
#1713555252
cagefsctl --init
#1713555260
cagefsctl --enable-all
#1713551582
yum install cagefs
#1713552146
service zabbix-agent restart
#1713552153
yum -y install lvemanager
#1713552254
history |grep mount
#1713552258
sudo mount -t nfs 192.168.0.100:/home/chaldene/cdp /mnt
#1713728958
csf -g 164.39.197.203
#1713728969
grep -i 164.39.197.203 /var/log/lfd.lo
#1713728973
grep -i 164.39.197.203 /var/log/lfd.lfd
#1713728975
grep -i 164.39.197.203 /var/log/lfd
#1713728976
grep -i 164.39.197.203 /var/log/lfd.log
#1713728986
grep -i 164.39.197.203 /var/log/maillog
#1713728989
grep -i 164.39.197.203 /var/log/maillog*
#1713729005
csf -a 164.39.197.203
#1713892351
 /scripts/whoowns sonsabai.co.uk
#1713892353
wp core version
#1713892363
cd /home/sonsabai/www
#1713892369
wp option get siteurl --allow-root
#1713892378
wp plugin list --allow-root
#1713892390
wp plugin deactivate wps-hide-login --allow-root
#1713892444
history |grep virginco
#1713916471
df
#1713916472
exim -bpc
#1713916473
exim -bp
#1713916477
pwnmail 1
#1713916480
history |grep exim
#1713916483
exim -bp | awk '/^ *[0-9]+[mhd]/{print "exim -Mrm " $3}' | bash
#1713939937
exit
#1713964612
cd /var/home
#1713964622
clear
#1713964624
cd /home
#1713964625
clear
#1713964628
ls -lahtr
#1713964632
cd paulmca1
#1713964633
clear
#1713964647
find / -type f -size +100M -exec du -h {} + | sort -r -h
#1713965056
top
#1713965057
df
#1713965061
free -ht
#1713965064
htop
#1713965065
top
#1713965096
lsof -p1317460
#1713965100
top
#1713965110
lsof -p1317460
#1713965133
kill -9 1317460
#1713965135
top
#1713965136
dmesg
#1713965139
dmesg |grep error
#1713965149
htop
#1713965150
top
#1713965155
uptime
#1714077952
top
#1714077957
htop
#1714077958
dmesg
#1714077966
dmesg |grep error
#1714077967
htop
#1714077968
top
#1714077974
uptime
#1714077975
df -h
#1714077979
service httpd status
#1714078000
ps aux
#1714078005
ps aux |grep back
#1714078023
cd /home
#1714078024
dir
#1714078024
ls -lahtr
#1714078028
cd /backup
#1714078029
dir
#1714078030
ls a-lthr
#1714078032
ls -lahtr
#1714078035
cd /home/backup
#1714078035
dir
#1714078036
ls -lahtr
#1714078037
cd /home
#1714078038
dir
#1714078039
ls -alhtr
#1714078041
cd /mnt
#1714078042
dir
#1714078042
ls -lahtr
#1714078045
cd 2024-04-12
#1714078046
dir
#1714078047
ls -lahtr
#1714078048
cd accounts
#1714078048
dir
#1714078049
ls -lahtr
#1714078052
ls -lahtr |grep psn
#1714078054
ls -lahtr |grep pns
#1714078059
exot
#1714078061
exit
#1714423544
top
#1714423549
free -ht
#1714423552
service zabbix-agent restart
#1714463657
csf -g 82.132.223.238
#1714464678
exit
#1714734204
top
#1714734209
df -h
#1714734213
service httpd restart
#1714734672
to
#1714734674
top
#1715805890
exim -bpc
#1715805891
exim -bp
#1715805893
pwnmail 1
#1715805900
history |grep exim 
#1715805904
exim -bp | awk '/^ *[0-9]+[mhd]/{print "exim -Mrm " $3}' | bash
#1715942186
toip
#1715942188
top
#1716243171
pwnmail 1
#1716243118
exim -bpc
#1716243121
pwnmail 1
#1716243125
nano /root
#1716243131
nano /root/.bashrc
#1716316782
ncdu /home/crrtipdl
#1716316898
ls -lahtr
#1716316906
cd u16girls
#1716316908
cat u16girls
#1716316912
rm  u16girls
#1716316916
cat install.sh
#1716316923
ls -lahtr
#1716316926
rm install.sh
#1716316928
ls -lahtr
#1716316953
df -h
#1716316964
cd /root
#1716316964
dir
#1716316965
ls -lahtr
#1716316973
cd /home
#1716316974
dir
#1716316975
ls -lahtr
#1716316980
ls -lahtr |grep crrt
#1716316983
cd crrtipdl
#1716316985
dir
#1716316986
ls -lahtr
#1716316989
cd www
#1716316989
dir
#1716316990
ls -lahtr
#1716316992
cd ..
#1716316993
s -lahtr
#1716316995
ls -lahtr
#1716317000
ls -lahtr |grep auto
#1716317003
ls -lahtr
#1716317015
ls -lahtr |grep .aut
#1716317058
ls -lahtr
#1716317906
ncdu
#1716317908
du -sh
#1716317911
cd /home
#1716317911
ncdu
#1716319482
df
#1716319490
df -h
#1716319495
ncdu /var
#1716322538
yum clean all
#1716322542
df h 
#1716322543
df -h
#1716322546
exit
#1716378803
killall httpd
#1716378806
killall mysqld
#1716378809
service httpd restart
#1716378843
service mysqld restart
#1716378968
top
#1716380751
exit
#1716384673
csf -g 80.229.15.102
#1716384698
uptime
#1716385257
exit
#1716462364
csf -g 151.230.2.181
#1716462370
csf -dr 151.230.2.181
#1716462372
csf -a 151.230.2.181
#1716462377
echo 151.230.2.181 >> /etc/csf/csf.ignore
#1716462377
csf -x
#1716462382
grep -i 151.230.2.181 /var/log/maillog
#1716462385
grep -i 151.230.2.181 /var/log/maillog |grep fail
#1716548276
cd /home
#1716548276
dir
#1716548277
ls -lahtr
#1716548281
cd stagingerris
#1716548282
cd www
#1716548282
dir
#1716548283
ls -lathr
#1716548286
cd en
#1716548287
dir
#1716548288
ls -lahtr
#1716548289
cd ..
#1716548290
ls -lahtr
#1716548302
cat .htaccess
#1716548319
cd ..
#1716548323
cd www/al
#1716548323
dir
#1716548324
ls -lahtr
#1716548327
cat .htaccess
#1716548364
cd ..
#1716548365
dir
#1716548365
ls -lahtr
#1716548366
cd ..
#1716548367
dir
#1716548367
ls -lahtr
#1716548563
history |grep less
#1716548569
less /root/.ssh/id_rsa.pub
#1716548685
rsync -avrt public_html root@64.226.123.206:/var/www/
#1716575929
exim -bp
#1716575930
top
#1716549503
cd /home/stagingerris
#1716549504
dir
#1716549505
ls -alhtr
#1716549507
cd www
#1716549507
dir
#1716549508
ls -lahtr
#1716549511
nano index.php
#1716550865
cd en
#1716550866
nano index.php
#1716550878
cd ..
#1716550879
cd al
#1716550880
nano index.php
#1716635177
/scripts/whoowns fireworkswedding.co.uk
#1717143689
top
#1717143693
service mysqld restart
#1717143943
service httpd restart
#1717436167
host 212.53.86.121
#1717436171
host 212.53.87.121
#1717436174
ping 212.53.87.121
#1717436211
ping 212.53.87.120
#1717436215
host 212.53.87.120
#1717436217
host 212.53.86.120
#1717436114
df
#1717436117
df -b
#1717436118
df -h
#1717567836
killall httpd
#1717567859
killall mysqld
#1717572614
top
#1717572616
exit
#1717573970
systemctl restart
#1717573995
service csf restart
#1717574318
csf -r
#1717574332
systemctl start csf.service
#1717574343
systemctl start lfd.service
#1717574365
grep -ir 'FASTSTART = "1"' /etc/csf/*
#1717574553
csf -r
#1717779424
df -hj
#1717779426
df -h
#1717779433
df -i
#1717779438
clear
#1717779440
iftop
#1717779447
clear
#1717779448
top
#1718821230
csf -g  86.174.16.83
#1718821236
csf -dr  86.174.16.83
#1718821238
csf -a  86.174.16.83
#1718821243
echo  86.174.16.83 >> /etc/csf/csf.ignore
#1718821243
csf -x
#1718821263
csf -e
#1718821970
csf -x
#1718821972
csf -e
#1719321422
top
#1719321431
service httpd restart
#1719321455
service mysqld restart
#1719322267
exit
#1719935481
 history |grep zabbi
#1719935599
grep /etc/zabbix/zabbix_agentd.conf |grep Server
#1719935608
grep Server /etc/zabbix/zabbix_agentd.conf
#1719935648
grep cdp /etc/zabbix/zabbix_agentd.conf
#1719935654
grep host /etc/zabbix/zabbix_agentd.conf
#1720534275
df-h
#1720534281
df -h
#1720534305
df -i
#1720534327
htop
#1720534332
iftop
#1720690842
top
#1720690851
htop
#1720690895
top
#1720690898
dir
#1720690899
cd /home
#1720690905
df 
#1720690907
htop
#1720690912
hostname
#1720691055
shutdown -r now
#1720691686
d /
#1720691687
cd /
#1720691688
dir
#1720691689
cd /home
#1720691690
dir
#1720691691
ls -lahtr
#1720691692
top
#1720691718
csf -x
#1720691723
top
#1720691762
dmesg
#1720691788
cd /home/backup
#1720691790
df
#1720691793
history |grep mnt
#1720691804
sudo mount -t nfs 192.168.0.100:/home/chaldene/cdp /mntsudo mount -t nfs 192.168.0.100:/home/chaldene/cdp /mnt
#1720691806
df
#1720691607
top
#1720691612
history
#1720691618
hostname
#1720691632
csf -d
#1720691638
csf -x
#1720691764
df
#1720691766
dmesg
#1720691769
dmesg |grep disk
#1720691771
dmesg |grep error
#1720691772
cd /home
#1720691773
dir
#1720691773
ls -lahtr
#1720691775
cd /backup
#1720691776
dir
#1720691776
ls -lahtr
#1720691783
df
#1720691783
cd /home/backup
#1720691821
history
#1720691823
history |grep mnt
#1720691835
 sudo mount -t nfs 192.168.0.100:/home/chaldene/cdp /mnt
#1720691836
df
#1720691840
cd mnt
#1720691842
cd /nmt
#1720691844
cd /mnt
#1720691845
dir
#1720691845
ls -lahtr
#1720691868
service zabbix-agent restart
#1720691875
history |grep force
#1720691878
/usr/local/cpanel/bin/backup --force
#1720691891
df
#1720691892
top
#1720693179
df -h
#1720693182
df -i
#1720891035
dmesg
#1720891037
dmesg |grep error
#1721064620
csf -g 2.120.103.83
#1721064657
csf -dr 2.120.103.83
#1721064665
csf -a 2.120.103.83
#1721064689
echo 2.120.103.83 >> /etc/csf/csf.ignore
#1721064706
grep -i 2.120.103.83 /var/log/maillog |grep fail
#1721371518
csf -r
#1721371544
csf -g
#1721371847
exit
#1721370672
killall httpd
#1721370675
killall mysql
#1721370676
killall mysqld
#1721370678
killall mysql
#1721370680
top
#1721370684
service httpd restart
#1721370727
servservice mysqld restart
#1721370789
service mysqld restart
#1721370889
service zabbix-agent restart
#1721370987
top
#1721370997
service zabbix-agent restart
#1721370998
csf -x
#1721371000
csf -e
#1721829650
top
#1721829652
uptime
#1721829661
service httpd restart
#1721830216
exit
#1722018664
csf -g 
#1722018673
csf -g 185.44.76.187
#1722293230
top
#1722293233
free -ht
#1722405062
cd /home/health2045/www
#1722405066
sudo su health2045 -s /bin/bash
#1722405108
wp core version
#1722405120
wp user list --allow-root
#1722405161
wp user create russ r.horn@mac.com --role=administrator
#1722405171
wp user create russ r.horn@mac.com --role=administrator --allow-root
#1722712904
ip addr show
#1722712906
ip addr show |grep 212
#1722721722
top
#1722721725
hostname
#1722721732
exit
#1722782946
nano aws.sh
#1722782963
chmod +x aws.sh
#1722782966
sh aws.sh 1 us-east-*
#1722783391
exit
#1722789762
EXIT
#1722789763
exit
#1722789443
iftop
#1722807350
cat /etc/mailips
#1722807927
exit
#1723358115
csf -g 31.112.32.35
#1723416921
cat /root/.ssh/authorized_keys
#1723465343
top
#1723465345
killall httpd
#1723465349
service httpd restart
#1723465361
service myqsld restart
#1723466948
service zabbix-agent restart
#1723468744
free -ht
#1723468748
service httpd status
#1723468754
service mysqld status
#1723468760
service mysqld restart
#1723574509
top
#1723574518
uptime
#1723574519
top
#1724320415
csf -g 216.128.23.63
#1724320425
csf -dr 216.128.23.63
#1724320437
csf -a 216.128.23.63
#1724320444
echo 216.128.23.63 >> /etc/csf/csf.ignore
#1724320445
csf -x
#1724320447
csf -e
#1724321220
exit
#1724334440
sudo su - athenare
#1724334452
clear
#1724334455
df -h
#1724334457
cd /home
#1724334458
clear
#1724334461
ls -lahtr
#1724334462
clear
#1724334475
grep |sudo athenare
#1724334480
clear
#1724334481
ls -lahtr
#1724334495
cd sudo su - athenare
#1724334500
cd athenare
#1724334501
clear
#1724334506
crontab -l
#1724334512
sudo service cron status
#1724334522
sudo service crond status
#1724334532
clear
#1724334536
crontab -l
#1724334564
grep CRON /var/log/messages
#1724334989
exigrep totaljobsmail /var/log/exim_mainlog
#1724335015
csf -g 91.230.171.34
#1724335042
exigrep Unsuitable /var/log/exim_mainlog
#1724335053
host 01020191793702d1-8c706ec3-476b-4f11-b1a7-18f83d2a4873-000000@eu-west-1.amazonses.com
#1724335057
dig +short 01020191793702d1-8c706ec3-476b-4f11-b1a7-18f83d2a4873-000000@eu-west-1.amazonses.com
#1724335062
csf -g 54.240.51.127
#1724335075
history |grep uaws
#1724335077
dir
#1724335078
ls -lahtr
#1724335079
cat aws.sh
#1724335278
nano uaws.sh
#1724335287
chmod +x uaws.sh
#1724335290
sh uaws.sh
#1724335342
cat /dev/null > uaws.sh
#1724335344
nano uaws.sh
#1724335349
chmod +x uaws.sh
#1724335352
sudo ./uaws.sh
#1724335365
sudo iptables -L -n
#1724335365
sudo ip6tables -L -n
#1724335391
sudo ip6tables -L -n |grep aws
#1724335394
csf -df
#1724335495
csf -x
#1724428575
csf -e
#1724599003
cd /home/
#1724599004
dir
#1724599004
ls -lahtr
#1724599009
hostname
#1724685782
clea
#1724685785
clear
#1724685787
ls -lahtr
#1724685852
cd ~/.ssh
#1724685855
clear
#1724685856
ls -lahtr
#1724685865
cd authorized_keys
#1724685870
exit
#1724761227
top
#1724763250
exit
#1724754799
rpm -qa | grep cloudlinux
#1725014139
csf -g 169.155.250.214
#1725014145
csf -dr 169.155.250.214
#1725014147
csf -a 169.155.250.214
#1725014153
echo 169.155.250.214 >> /etc/csf/csf.ignore
#1725014154
csf -x
#1725014155
csf -e
#1725180968
/scripts/pkgacct martsblo
#1725180978
du -sh /home/martsblo
#1725180990
whmlogin
#1725211617
csf -g 81.220.13.225
#1725211622
csf -dr 81.220.13.225
#1725211626
csf -a 81.220.13.225
#1725211632
echo 81.220.13.225 >> /etc/csf/csf.ginore
#1725211634
echo 81.220.13.225 >> /etc/csf/csf.ignore
#1725211635
csf -x
#1725211637
csf -e
#1725257864
exit
#1725289800
csf -g 
#1725289804
csf -g 86.22.46.231
#1725289810
csf -dr 86.22.46.231
#1725289812
csf -a 86.22.46.231
#1725289817
echo 86.22.46.231 >> /etc/csf/csf.ignore
#1725289818
csf -x
#1725289825
grep -i 86.22.46.231 /var/log/maillog
#1725289829
grep -i 86.22.46.231 /var/log/maillog |grep fail
#1725628336
exim bpc
#1725628338
exim -bpc
#1725628343
exim -bp
#1725628370
pwnmail 1
#1725628383
top
#1725642024
lsof -p2989748
#1725642030
cd /etc/apache2/logs
#1725642044
tail -f error_log
#1725642109
dmesg
#1725642132
service httpd restart
#1725642190
service mysqld restat
#1725642294
service mysqld restart
#1725642444
top[p
#1725811874
csf -d 13.79.0.0/16 #do not delete
#1725820260
iftop
#1725820274
iftop
#1725963095
cat/usr/local/cpanel/Cpanel/JSON.pm 
#1725963103
cat /usr/local/cpanel/Cpanel/JSON.pm
#1725991782
top
#1726049918
killall httpd
#1726049920
killall mysqld
#1726049923
service httpd rstart
#1726049925
service httpd restart
#1726049952
service mysqld restart
#1726050626
exit
#1726426096
df
#1726426117
df -h
#1726653998
csf -g 
#1726654029
csf -g 82.132.187.113
#1726654035
csf -dr 82.132.187.113
#1726654040
csf -a csf -dr 82.132.187.113
#1726654051
csf  -dr 82.132.187.113
#1726654057
csf  -a 82.132.187.113
#1726654069
echo 82.132.187.113 >> /etc/csf/csf.ignore
#1726654070
csf -x
#1726654072
csf -e
#1726654854
grep -i grep 82.132.187.113 /var/log/messages |grep fail
#1726661632
killall httpd
#1726661632
killall mysqld
#1726725978
csf -g  185.237.60.158
#1726726001
grep -i  185.237.60.158 /var/log/maillog 
#1726726035
grep -i  185.237.60.158 /var/log/maillog |grep fail
#1726733568
iftop
#1726865796
/scripts/whoowns google.com
#1726865802
ping google.com
#1727260585
clear
#1727260587
iftop
#1727260604
clear
#1727260605
iftop
#1727260615
clear
#1727260653
iftop
#1727432149
exigrep phil@philmcphail.com /var/log/exim_mainlog
#1727432173
grep -i phil@philmcphail.com /var/log/maillog
#1727440638
killall httpd
#1727440640
killall mysqld
#1727440680
service httpd stop
#1727440680
service mysqld stop
#1727440731
top
#1727440745
lall iftop
#1727440749
killall iftop
#1727440752
service httpd start
#1727440781
service mysqld start
#1727441780
csf -df
#1727638324
ncdu /home/clarkass
#1727638501
du -sh /home//home/clarkass
#1727638504
du -sh 
#1727638510
du -sh /home/clarkass
#1727638524
ncdu /home/clarkass
#1727638684
ncdu /home/clarkassncdu 
#1727638687
ncdu /home/clarkass
#1727639383
iftop
#1727643175
cat files_outside_homedir.txt
#1727643177
ls -lahtr
#1727643178
top
#1727648792
ncdu /home/clarkass
#1727648984
du -sh /home/clarkass
#1727650040
cat /etc/hosts
#1727642915
cpaneluser=clarkass && find / -path /home/virtfs -prune -o -path /home/${cpaneluser}  -prune -o -user "${cpaneluser}" -type f -ls > files_outside_homedir.txt 2>/dev/null
#1727645117
iftop
#1727645125
host ec2-47-128-51-162.ap-southeast-1.compute.amazonaws.com
#1727645149
csf -d 47.128.51.0/24 #do not dlete
#1727715263
csf -g 
#1727715278
csf -g 81.99.196.175
#1727715286
csf -dr  81.99.196.175
#1727715299
csf -a  81.99.196.175
#1727715311
echo 81.99.196.175 >> /etc/csf/csf.ignore
#1727715314
csf -x
#1727715316
csf -e
#1727715347
grep 81.99.196.175 /var/log/maillog
#1727715351
grep 81.99.196.175 /var/log/maillog |Grep fail
#1727715356
grep 81.99.196.175 /var/log/maillog |grep fail
#1727822477
nano /etc/csf/csf.deny
#1727822500
csf -r
#1727873665
grep -i arahpant@gmail.com /var/log/exim_mainlog
#1727873786
grep -i gilbert@health2045.com /var/log/maillog
#1727873794
csf -g 209.85.217.162
#1727873815
csf -x
#1727881722
csf -e
