========================================== SECURITY AUDIT PAN.BNGH.IT - Fri May 1 21:03:37 CEST 2026 ========================================== === 1. PYTHON IN /tmp - ANALISI === -rw-r--r-- 1 root root 27195214 Oct 2 2023 /tmp/Python-3.12.0.tgz /tmp/Python-3.12.0.tgz: gzip compressed data, max compression, from Unix, original size 103454720 d6eda3e1399cef5dfde7c4f319b0596c /tmp/Python-3.12.0.tgz --- Chi lo ha scaricato? --- File: /tmp/Python-3.12.0.tgz Size: 27195214 Blocks: 53184 IO Block: 4096 regular file Device: 700h/1792d Inode: 17 Links: 1 Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2026-05-01 03:22:56.454253824 +0200 Modify: 2023-10-02 14:33:21.000000000 +0200 Change: 2026-01-29 16:53:53.989727050 +0100 Birth: 2026-01-29 16:53:53.737725452 +0100 --- Directory Python estratta? --- --- Binari python compilati in /tmp? --- === 2. FILE MODIFICATI ULTIMI 3 GIORNI (esclusi log/cache) === /opt/cpanel/ea-php81/root/var/lib/pear/.channels/pecl.php.net.reg /opt/cpanel/ea-php81/root/var/lib/pear/.channels/pear.php.net.reg /opt/cpanel/ea-php81/root/var/lib/pear/.channels/__uri.reg /opt/cpanel/ea-php81/root/var/lib/pear/.channels/.alias/phpdocs.txt /opt/cpanel/ea-php81/root/var/lib/pear/.channels/.alias/pecl.txt /opt/cpanel/ea-php81/root/var/lib/pear/.channels/.alias/pear.txt /opt/cpanel/ea-php81/root/var/lib/pear/.channels/doc.php.net.reg /opt/cpanel/ea-php81/root/var/lib/pear/.depdblock /opt/cpanel/ea-php81/root/var/lib/pear/pkgxml/Structures_Graph.xml /opt/cpanel/ea-php81/root/var/lib/pear/pkgxml/PEAR.xml /opt/cpanel/ea-php81/root/var/lib/pear/pkgxml/XML_Util.xml /opt/cpanel/ea-php81/root/var/lib/pear/pkgxml/Console_Getopt.xml /opt/cpanel/ea-php81/root/var/lib/pear/pkgxml/Archive_Tar.xml /opt/cpanel/ea-php81/root/var/lib/pear/.registry/console_getopt.reg /opt/cpanel/ea-php81/root/var/lib/pear/.registry/xml_util.reg /opt/cpanel/ea-php81/root/var/lib/pear/.registry/structures_graph.reg /opt/cpanel/ea-php81/root/var/lib/pear/.registry/archive_tar.reg /opt/cpanel/ea-php81/root/var/lib/pear/.registry/pear.reg /opt/cpanel/ea-php81/root/var/lib/pear/.filemap /opt/cpanel/ea-php81/root/var/lib/pear/.depdb /opt/cpanel/ea-php81/root/usr/sbin/php-fpm /opt/cpanel/ea-php81/root/usr/lib64/php/build/pkg.m4 /opt/cpanel/ea-php81/root/usr/lib64/php/build/ax_check_compile_flag.m4 /opt/cpanel/ea-php81/root/usr/lib64/php/build/Makefile.global /opt/cpanel/ea-php81/root/usr/lib64/php/build/ax_gcc_func_attribute.m4 /opt/cpanel/ea-php81/root/usr/lib64/php/build/gen_stub.php /opt/cpanel/ea-php81/root/usr/lib64/php/build/config.sub /opt/cpanel/ea-php81/root/usr/lib64/php/build/shtool /opt/cpanel/ea-php81/root/usr/lib64/php/build/phpize.m4 /opt/cpanel/ea-php81/root/usr/lib64/php/build/ltmain.sh /opt/cpanel/ea-php81/root/usr/lib64/php/build/config.guess /opt/cpanel/ea-php81/root/usr/lib64/php/build/libtool.m4 /opt/cpanel/ea-php81/root/usr/lib64/php/build/php.m4 /opt/cpanel/ea-php81/root/usr/lib64/php/build/php_cxx_compile_stdcxx.m4 /opt/cpanel/ea-php81/root/usr/lib64/php/modules/soap.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/pgsql.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/mysqli.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/dom.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/pdo_mysql.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/gmp.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/xsl.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/simplexml.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/sockets.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/exif.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/intl.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/dba.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/gettext.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/mysqlnd.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/pspell.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/pdo_odbc.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/gd.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/imap.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/phar.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/ftp.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/odbc.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/tokenizer.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/mbstring.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/bz2.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/shmop.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/pdo.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/pdo_pgsql.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/sqlite3.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/curl.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/posix.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/sodium.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/zip.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/tidy.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/xml.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/pdo_sqlite.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/fileinfo.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/calendar.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/xmlwriter.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/snmp.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/ctype.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/xmlreader.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/iconv.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/bcmath.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/enchant.so /opt/cpanel/ea-php81/root/usr/lib64/php/modules/ldap.so /opt/cpanel/ea-php81/root/usr/share/tests/pear/Structures_Graph/tests/AcyclicTestTest.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/Structures_Graph/tests/BasicGraphTest.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/Structures_Graph/tests/helper.inc /opt/cpanel/ea-php81/root/usr/share/tests/pear/Console_Getopt/tests/bug13140.phpt /opt/cpanel/ea-php81/root/usr/share/tests/pear/Console_Getopt/tests/bug10557.phpt /opt/cpanel/ea-php81/root/usr/share/tests/pear/Console_Getopt/tests/bug11068.phpt /opt/cpanel/ea-php81/root/usr/share/tests/pear/Console_Getopt/tests/001-getopt.phpt /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/CreateCDataSectionTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/CreateTagFromArrayTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/GetDocTypeDeclarationTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/AttributesToStringTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/RaiseErrorTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/CollapseEmptyTagsTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/Bug21184Tests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/ReverseEntitiesTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/CreateCommentTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/Bug5392Tests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/IsValidNameTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/Bug18343Tests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/ApiVersionTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/CreateStartElementTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/Bug21177Tests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/ReplaceEntitiesTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/CreateEndElementTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/CreateTagTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/AbstractUnitTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/GetXmlDeclarationTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/SplitQualifiedNameTests.php /opt/cpanel/ea-php81/root/usr/share/tests/pear/XML_Util/tests/Bug4950Tests.php /opt/cpanel/ea-php81/root/usr/share/doc/ea-php81-php-mbstring/libmbfl_LICENSE /opt/cpanel/ea-php81/root/usr/share/doc/pear/Archive_Tar/docs/Archive_Tar.txt /opt/cpanel/ea-php81/root/usr/share/doc/pear/Structures_Graph/docs/tutorials/Structures_Graph/Structures_Graph.pkg /opt/cpanel/ea-php81/root/usr/share/doc/pear/Structures_Graph/LICENSE /opt/cpanel/ea-php81/root/usr/share/doc/pear/PEAR/LICENSE /opt/cpanel/ea-php81/root/usr/share/doc/pear/PEAR/README.rst /opt/cpanel/ea-php81/root/usr/share/doc/pear/PEAR/INSTALL /opt/cpanel/ea-php81/root/usr/share/doc/pear/XML_Util/examples/example.php /opt/cpanel/ea-php81/root/usr/share/doc/pear/XML_Util/examples/example2.php /opt/cpanel/ea-php81/root/usr/share/doc/ea-php81-php-fpm/php-fpm.conf.default /opt/cpanel/ea-php81/root/usr/share/doc/ea-php81-php-common/TSRM_LICENSE /opt/cpanel/ea-php81/root/usr/share/doc/ea-php81-php-common/ZEND_LICENSE /opt/cpanel/ea-php81/root/usr/share/doc/ea-php81-php-common/libmagic_LICENSE /opt/cpanel/ea-php81/root/usr/share/fpm/status.html /opt/cpanel/ea-php81/root/usr/share/pear-data/PEAR/template.spec /opt/cpanel/ea-php81/root/usr/share/pear-data/PEAR/package.dtd /opt/cpanel/ea-php81/root/usr/share/licenses/ea-php81-php-bcmath/libbcmath_LICENSE /opt/cpanel/ea-php81/root/usr/share/licenses/ea-php81-php-fpm/fpm_LICENSE /opt/cpanel/ea-php81/root/usr/share/pear/Archive/Tar.php /opt/cpanel/ea-php81/root/usr/share/pear/peclcmd.php /opt/cpanel/ea-php81/root/usr/share/pear/System.php /opt/cpanel/ea-php81/root/usr/share/pear/Structures/Graph.php /opt/cpanel/ea-php81/root/usr/share/pear/Structures/Graph/Manipulator/AcyclicTest.php /opt/cpanel/ea-php81/root/usr/share/pear/Structures/Graph/Node.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR.php /opt/cpanel/ea-php81/root/usr/share/pear/XML/Util.php /opt/cpanel/ea-php81/root/usr/share/pear/Console/Getopt.php /opt/cpanel/ea-php81/root/usr/share/pear/pearcmd.php /opt/cpanel/ea-php81/root/usr/share/pear/OS/Guess.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/ChannelFile/Parser.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Validator/PECL.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Builder.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Config.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Validate.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Exception.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/ChannelFile.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Config.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Mirror.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Config.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Build.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Pickle.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Auth.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Install.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Build.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Channels.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Auth.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Test.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Remote.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Registry.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Pickle.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Common.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Registry.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Test.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Package.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Package.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Install.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Remote.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Channels.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command/Mirror.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Packager.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Command.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Downloader/Package.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Frontend/CLI.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/REST.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Task/Unixeol.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Task/Postinstallscript.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Task/Replace.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Task/Replace/rw.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Task/Windowseol/rw.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Task/Windowseol.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Task/Common.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Task/Unixeol/rw.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Task/Postinstallscript/rw.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Dependency2.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Registry.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Script.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Www.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Src.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Cfg.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Script.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Data.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Man.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Test.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Data.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Doc.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Php.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Php.xml /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Www.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Common.php /opt/cpanel/ea-php81/root/usr/share/pear/PEAR/Installer/Role/Test.xml === 3. FILE PHP CREATI ULTIMI 7 GIORNI === /home/bangherangstudio/paladeri/salesforce/storage/framework/views/75ac76c399ea838799ab3f68075d8891.php /home/bangherangstudio/bngh.it/separazione.php /home/bangherangstudio/paladeri.it/wp-content/wflogs/attack-data.php /home/bangherangstudio/paladeri.it/wp-content/wflogs/ips.php /home/bangherangstudio/paladeri.it/wp-content/wflogs/config-transient.php /home/bangherangstudio/paladeri.it/wp-content/wflogs/rules.php /home/bangherangstudio/paladeri.it/wp-content/wflogs/config-synced.php /home/bangherangstudio/paladeri.it/wp-content/wflogs/config-livewaf.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/templates/klarna-payments-categories.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/klarna-payments-for-woocommerce.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/KECOneStepIntegration.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/Api/Registry.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/Api/Controllers/Controller.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Ajax.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Request/RequestPatch.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Request/RequestPost.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Request/Patch/RequestPatchUpdate.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Request/Get/RequestGetOrder.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Request/Post/RequestPostRefund.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Request/Post/RequestPostCancel.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Request/Post/RequestPostCapture.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Request/Request.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Request/RequestGet.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/MetaBox.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/Settings.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/ReturnFee.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/PendingOrders.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/SellersApp.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement/ScheduledActions.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/OrderManagement.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/Compatibility/FluidCheckout.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/Compatibility.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/PluginFeatures.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/src/Features.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/autoload.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/composer/autoload_classmap.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/composer/autoload_psr4.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/composer/autoload_real.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/composer/ClassLoader.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/composer/InstalledVersions.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/composer/platform_check.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/composer/autoload_namespaces.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/composer/autoload_static.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/vendor/composer/installed.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/blocks/src/payment/KlarnaPayments.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/blocks/build/payment.asset.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/index.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/includes/kp-functions.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/includes/admin/views/status-report.php /home/bangherangstudio/seaoffice.com/wp-content/plugins/klarna-payments-for-woocommerce/scoper.custom.php === 4. WEBSHELL SIGNATURES IN PHP === === 5. FILE CON PERMESSI 777 IN PUBLIC_HTML === === 6. CRONTAB COMPLETO ROOT === 0 23 * * * /usr/local/bin/clean_tmp.sh 0 6 * * * /usr/local/bin/clean_tmp.sh 12 0 * * * (/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null) 0 2 * * * /usr/local/cpanel/bin/backup 35 * * * * /usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check 0 6 * * * /usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1 30 5 * * * /usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1 5,20,35,50 * * * * /usr/local/cpanel/scripts/eximstats_spam_check 2>&1 45 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache 17 3 * * * /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1 */5 * * * * /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 30 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache 25 */2 * * * /usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1 15 */2 * * * /usr/local/cpanel/bin/dbindex >/dev/null 2>&1 0 */2 * * * /usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1 12 2 * * * /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify 14,29,44,59 * * * * /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1 15 3 * * * /usr/local/cpanel/3rdparty/bin/freshclam --quiet --no-warnings 09,39 * * * * /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1 4 * * * * /usr/local/cpanel/bin/process_team_queue > /dev/null 2>&1 33 23 * * * /root/scripts/db-backup-b2.sh 0 0 * * * /usr/local/sbin/bngh-security-scanner.sh >> /var/log/bngh-scanner/cron.log 2>&1 === 7. CRONTAB TUTTI GLI UTENTI === --- bangherangstudio --- MAILTO="" * * * * * /usr/local/bin/ea-php74 /home/bangherangstudio/tregolfisailingweek.com/sys.cronjobs.php apiKey=cron_e6082d94c4661466e91ae314b566bcaa50b3bbnb2886e0j41735bz982b0112a2a35a174f109e0c068954e1c5c940cfc9bf90bed9c930e4yfa28db25cd2c url=calendariostazze action=send_reminders * * * * * /usr/local/bin/ea-php74 /home/bangherangstudio/gialauyacht.com/api/v2/ajax.php resource_name=cronjob action=annullaAppuntamentiScaduti 0 2 * * * /usr/local/bin/ea-php83 /home/bangherangstudio/vitosimeolisaloon.it/api/v2/ajax.php resource_name=appuntamenti action=cronAppuntamentiRicorrenti SHELL="/bin/bash" 0 4 * * * /usr/local/bin/ea-php83 /home/bangherangstudio/bngh.it/call-tracker/bin/process_calls.php >> /home/bangherangstudio/bngh.it/call-tracker/logs/cron.log 2>&1 SHELL="/bin/bash" * * * * * /usr/local/bin/php /home/bangherangstudio/paladeri/docs/v1/artisan schedule:run >> /dev/null 2>&1 === 8. /etc/cron.d CONTENUTO === total 80 drwxr-xr-x. 2 root root 4096 May 1 19:03 . drwxr-xr-x. 146 root root 20480 May 1 21:01 .. -rw-r--r--. 1 root root 128 Apr 6 2024 0hourly -rw-r--r-- 1 root root 486 Apr 27 21:56 backup_jobs_helper -rw-r--r-- 1 root root 433 Apr 27 21:56 comet_license_sync -rw-------. 1 root root 130 Dec 28 2023 cpanel-analytics -rw-------. 1 root root 76 Dec 28 2023 cpanel_autossl -rw-r--r-- 1 root root 14 Mar 18 23:08 csf-cron -rw------- 1 root root 161 Apr 13 14:26 jetapps -rw-r--r-- 1 root root 65 Apr 16 00:12 kcare-cron -rw-r--r-- 1 root root 74 Mar 18 23:08 lfd-cron -rw-r--r-- 1 root root 0 Apr 10 21:45 libcare-cron -rw-r--r-- 1 root root 2103 Mar 23 16:58 mailman -rw-r--r-- 1 root root 76 Feb 9 19:18 maldet_pub -rw-r--r--. 1 root root 108 Dec 17 2024 raid-check -rw-r--r-- 1 root root 234 Feb 17 16:58 wordpress-cron -rw-r--r-- 1 root root 881 Apr 22 04:47 wp-toolkit-update --- File non standard --- === /etc/cron.d/0hourly === # Run the hourly jobs SHELL=/bin/bash PATH=/sbin:/bin:/usr/sbin:/usr/bin MAILTO=root 01 * * * * root run-parts /etc/cron.hourly === /etc/cron.d/backup_jobs_helper === # /etc/cron.d/backup_jobs_helper: cron job for Comet backup jobs processing # # This cron job runs the backup_jobs_helper script every 5 minutes to check for # and execute any scheduled backup jobs that are due to run. # # The script is part of the Comet backup plugin for cPanel/WHM # # Format: minute hour day month dow user command # Run backup jobs helper every 5 minutes */5 * * * * root /usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1 === /etc/cron.d/comet_license_sync === # /etc/cron.d/comet_license_sync: cron job for Comet license-based registration # # This cron job runs every minute to check the cometbackup license status # and automatically registers or unregisters the plugin with AppConfig based # on license availability. # # Format: minute hour day month dow user command # Run license sync every minute * * * * * root /usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1 === /etc/cron.d/cpanel-analytics === 23 2 * * * root /usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1 === /etc/cron.d/cpanel_autossl === 48 0,3,6,9,12,15,18,21 * * * root /usr/local/cpanel/bin/autossl_check --all === /etc/cron.d/csf-cron === SHELL=/bin/sh === /etc/cron.d/jetapps === SHELL=/bin/bash 55 20 * * * root yum -y update jetapps --disablerepo=* --enablerepo=jetapps > /dev/null 2>&1 && /usr/bin/jetapps --autoupdate > /dev/null 2>&1 === /etc/cron.d/kcare-cron === 55 1,5,9,13,17,21 * * * root /usr/bin/kcarectl -q --auto-update === /etc/cron.d/lfd-cron === SHELL=/bin/sh 0 0 * * * root /usr/sbin/csf --lfd restart > /dev/null 2>&1 === /etc/cron.d/libcare-cron === === /etc/cron.d/mailman === SHELL=/bin/bash MAILTO=postmaster # At 8AM every day, mail reminders to admins as to pending requests. # They are less likely to ignore these reminders if they're mailed # early in the morning, but of course, this is local time... ;) 0 8 * * * mailman /usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/bin/python3 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs # # At 9AM, send notifications to disabled members that are due to be # reminded to re-enable their accounts. 0 9 * * * mailman /usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/bin/python3 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled # # Noon, mail digests for lists that do periodic as well as threshhold delivery. 0 12 * * * mailman /usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/bin/python3 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests # # 5 AM on the first of each month, mail out password reminders. 0 5 1 * * mailman /usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/bin/python3 -S /usr/local/cpanel/3rdparty/mailman/cron/mailpasswds # # Every 5 mins, try to gate news to mail. You can comment this one out # if you don't want to allow gating, or don't have any going on right now, # or want to exclusively use a callback strategy instead of polling. #0,5,10,15,20,25,30,35,40,45,50,55 * * * * mailman /usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/bin/python3 -S /usr/local/cpanel/3rdparty/mailman/cron/gate_news # # At 3:27am every night, regenerate the gzip'd archive file. Only # turn this on if the internal archiver is used and # GZIP_ARCHIVE_TXT_FILES is false in mm_cfg.py 27 3 * * * mailman /usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/bin/python3 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip # # At 4:30AM daily, cull old entries from the 'bad' and 'shunt' queues. 30 4 * * * mailman /usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/bin/python3 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt === /etc/cron.d/maldet_pub === */5 * * * * root /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1 === /etc/cron.d/raid-check === # Run system wide raid-check once a week on Sunday at 1am by default 0 1 * * Sun root /usr/sbin/raid-check === /etc/cron.d/wordpress-cron === */15 * * * * bangherangstudio /usr/local/bin/php /home/bangherangstudio/fabrizioiacono.it/wp-cron.php > /dev/null 2>&1 */15 * * * * bangherangstudio /usr/local/bin/php /home/bangherangstudio/seaoffice.com/wp-cron.php > /dev/null 2>&1 === /etc/cron.d/wp-toolkit-update === # This cronjob is responsible for receiving the updates of WP Toolkit. # It works as following logic: # - WPT CLI is called to receive the available update version; # - If update is found, then the URLs to the host with repositories are updated and cache is cleared for WPT repos; # - If WPT CLI fails (e.g. unable to communicate with update service or WPT is completely broken), then # the cronjob executes wp-toolkit-installer script to set the default URLs to host with repositories; # - Finally the yum update is called to install latest available version. 0 1 * * * root sleep $((1 + RANDOM \% 5))h $((1 + RANDOM \% 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null === 9. HISTORY ROOT === #1777653296 # Trova il PID della sua sessione #1777653296 ps aux | grep "pts/0" #1777653296 # Killalo #1777653296 pkill -9 -t pts/0 #1777653296 # Blocca il suo IP #1777653296 csf -d 212.105.155.26 "intruso attivo" #1777653296 # Rimuovi la backdoor #1777653296 rm -rf /tmp/.sshrc* #1777653296 # Vedi cosa ha fatto #1777653297 cat /tmp/.sshrc.1y8f/sshrc.bashrc #1777653309 csf -d 212.105.153.107 "intruso ieri" #1777653362 clear #1777653363 # Backup prima #1777653363 cp /root/.ssh/authorized_keys /root/.ssh/authorized_keys.bak #1777653363 # Tieni SOLO la chiave di mx (root@mail) #1777653363 grep "root@mail" /root/.ssh/authorized_keys > /root/.ssh/authorized_keys.new #1777653363 mv /root/.ssh/authorized_keys.new /root/.ssh/authorized_keys #1777653374 # Tieni SOLO la chiave di mx (root@mail) #1777653374 grep "root@mail" /root/.ssh/authorized_keys > /root/.ssh/authorized_keys.new #1777653374 mv /root/.ssh/authorized_keys.new /root/.ssh/authorized_keys #1777653385 # Tieni SOLO la chiave di mx (root@mail) #1777653385 grep "root@mail" /root/.ssh/authorized_keys > /root/.ssh/authorized_keys.new #1777653385 mv /root/.ssh/authorized_keys.new /root/.ssh/authorized_keys #1777653396 chmod 600 /root/.ssh/authorized_keys #1777653401 cat /root/.ssh/authorized_keys #1777653422 clear #1777653423 csf -d 212.105.153.107 "intruso ieri" #1777653423 csf -d 212.105.0.0/16 "range intruso" #1777653423 # Pulisci anche le chiavi dell'utente bangherangstudio #1777653423 cat /home/bangherangstudio/.ssh/authorized_keys #1777653517 clear #1777653518 # Pulisci chiavi bangherangstudio #1777653518 > /home/bangherangstudio/.ssh/authorized_keys #1777653518 chmod 600 /home/bangherangstudio/.ssh/authorized_keys #1777653518 # Verifica che root ha solo mx #1777653518 cat /root/.ssh/authorized_keys #1777653518 cat /home/bangherangstudio/.ssh/authorized_keys #1777653518 echo "FATTO - solo mx può accedere" #1777653623 clear #1777653624 yum install epel-release -y && yum install lua-socket -y #1777653645 clear #1777653646 yum install cpanel-lua-socket -y #1777653763 yum --enablerepo=powertools install lua-socket -y #1777653769 dnf config-manager --set-enabled powertools #1777653770 dnf install lua-socket -y #1777654058 clear #1777654059 dnf install lua-socket --enablerepo=appstream -y #1777654951 /scripts/upcp --force #1777655051 clear #1777655052 /usr/local/cpanel/cpanel -V === 10. HISTORY BANGHERANGSTUDIO === #1773162312 php artisan config:clear #1773162313 php artisan view:clear #1773162386 clear #1773162387 mysql -u bangherangstudio_paladeri -p'9Gg;T9K+O9m)' bangherangstudio_@contacts_paladeri@ -e "DESCRIBE addresses;" #1773162396 clear #1773162397 mysql -u bangherangstudio_paladeri -p'9Gg;T9K+O9m)' bangherangstudio_@contacts_paladeri@ -e "SELECT * FROM addresses WHERE addressable_type LIKE '%Organization%' LIMIT 3\G" #1773162530 clear #1773162534 php artisan optimize:cleart #1773162536 php artisan optimize:clear #1773749084 crontab -l -u bangherangstudio 2>/dev/null | grep -i "crv\|circolo\|cron\|compleanno\|birthday" #1773749113 [bangherangstudio@pan ~]$ crontab -l -u bangherangstudio 2>/dev/null | grep -i "crv\|circolo\|cron\|compleanno\|birthday" #1773749113 [bangherangstudio@pan ~]$ #1773749146 clear #1773749146 crontab -l | grep -i "crv\|circolo\|cron\|compleanno\|ajax\|birthday\|php" #1773749173 clear #1773749175 crontab -l #1773749200 clear #1773749201 sudo crontab -l #1773749242 clear #1773749243 crontab -l #1773749268 cd.. #1773749268 cd. #1774979218 # Collegati via SSH al server dove sta lcp.bngh.it #1774979218 # Se è su pan: #1774979218 ssh bangherangstudio@pan.bngh.it === 11. LOGIN LOG CPANEL COMPLETO === [2026-05-01 00:44:46 +0200] info [whostmgrd] 42.96.61.68 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 00:59:14 +0200] info [whostmgrd] 23.81.118.58 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 01:16:18 +0200] info [whostmgrd] 87.121.79.185 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 01:16:57 +0200] info [whostmgrd] 51.89.19.199 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 01:47:29 +0200] info [whostmgrd] 51.161.117.166 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 01:58:47 +0200] info [whostmgrd] 192.253.248.122 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 02:02:41 +0200] info [whostmgrd] 213.152.161.114 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 02:31:42 +0200] info [whostmgrd] 221.218.142.17 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 03:01:31 +0200] info [whostmgrd] 185.209.198.214 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 03:06:32 +0200] info [whostmgrd] 142.93.43.26 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 03:27:49 +0200] info [whostmgrd] 42.96.61.68 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 03:33:34 +0200] info [whostmgrd] 178.237.58.228 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 03:40:26 +0200] info [webmaild] 79.127.181.27 - - "GET /apple-touch-icon.png HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 03:55:11 +0200] info [whostmgrd] 38.55.215.54 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 04:26:53 +0200] info [whostmgrd] 186.244.222.109 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 04:29:40 +0200] info [whostmgrd] 186.244.222.109 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 04:55:56 +0200] info [whostmgrd] 185.177.238.46 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 05:04:45 +0200] info [whostmgrd] 38.55.215.107 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 05:39:36 +0200] info [cpaneld] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 05:39:36 +0200] info [whostmgrd] 131.163.88.225 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 06:16:37 +0200] info [whostmgrd] 94.26.106.205 - root "GET /json-api/version?api.version=1 HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to WHM with bad accesshash or API token [2026-05-01 06:17:12 +0200] info [whostmgrd] 94.26.106.205 - root "GET /json-api/version?api.version=1 HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to WHM with bad accesshash or API token [2026-05-01 06:21:46 +0200] info [whostmgrd] 23.81.118.58 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 06:36:28 +0200] info [whostmgrd] 94.26.106.205 - root "GET /json-api/listaccts?api.version=1 HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to WHM with bad accesshash or API token [2026-05-01 06:40:20 +0200] info [whostmgrd] 14.172.166.233 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 06:44:13 +0200] info [whostmgrd] 94.26.106.205 - root "GET /json-api/listaccts?api.version=1 HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to WHM with bad accesshash or API token [2026-05-01 07:03:30 +0200] info [whostmgrd] 94.26.106.205 - root "GET /json-api/listaccts?api.version=1 HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to WHM with bad accesshash or API token [2026-05-01 07:10:56 +0200] info [whostmgrd] 94.26.106.205 - root "GET /json-api/listaccts?api.version=1 HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to WHM with bad accesshash or API token [2026-05-01 07:11:19 +0200] info [whostmgrd] 103.119.15.186 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 07:44:43 +0200] info [whostmgrd] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 07:44:52 +0200] info [whostmgrd] 23.81.118.58 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 07:44:54 +0200] info [cpaneld] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 07:44:54 +0200] info [cpaneld] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 07:44:54 +0200] info [cpaneld] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 07:44:54 +0200] info [cpaneld] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 07:45:25 +0200] info [cpaneld] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 07:45:25 +0200] info [cpaneld] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 07:45:25 +0200] info [cpaneld] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 07:45:25 +0200] info [cpaneld] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 09:29:26 +0200] info [cpaneld] 82.40.71.3 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 09:38:43 +0200] info [webmaild] 46.13.41.176 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN webmaild: root login is not permitted to webmaild [2026-05-01 10:07:15 +0200] info [whostmgrd] 93.123.109.79 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 10:32:17 +0200] info [whostmgrd] 175.29.7.17 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 10:33:27 +0200] info [whostmgrd] 93.123.109.79 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 10:36:26 +0200] info [whostmgrd] 45.198.144.227 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 10:36:39 +0200] info [whostmgrd] 45.198.144.227 - rootx13 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 10:36:40 +0200] info [cpaneld] 45.198.144.227 - rootx13 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rootx13 (has_cpuser_file failed) [2026-05-01 10:36:43 +0200] info [whostmgrd] 45.198.144.227 - rootx13 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 10:36:44 +0200] info [cpaneld] 45.198.144.227 - rootx13 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user rootx13 (has_cpuser_file failed) [2026-05-01 10:58:50 +0200] info [whostmgrd] 51.89.19.199 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 10:59:49 +0200] info [whostmgrd] 166.88.90.22 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 11:00:12 +0200] info [whostmgrd] 149.248.13.25 - root "POST /login/ HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 11:12:28 +0200] info [whostmgrd] 93.150.210.199 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 11:12:38 +0200] info [cpaneld] 93.150.210.199 - bangherangstudio "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password [2026-05-01 11:22:32 +0200] info [webmaild] 168.144.47.228 - - "GET /wordpress/ HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 11:27:53 +0200] info [cpaneld] 185.80.128.73 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 11:27:53 +0200] info [whostmgrd] 185.80.128.73 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 11:34:37 +0200] info [whostmgrd] 2.237.150.226 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 11:34:38 +0200] info [whostmgrd] 2.237.150.226 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 11:34:51 +0200] info [whostmgrd] 2.237.150.226 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 11:35:31 +0200] info [cpaneld] 2a05:7cc0:0:185:80:128:73:1 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld [2026-05-01 11:35:31 +0200] info [whostmgrd] 2a05:7cc0:0:185:80:128:73:1 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 11:36:27 +0200] info [whostmgrd] 2.237.150.226 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 17:42:42 +0200] info [cpaneld] 194.243.83.97 - bangherangstudio "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password [2026-05-01 17:42:43 +0200] info [cpaneld] 194.243.83.97 - bangherangstudio "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password [2026-05-01 17:42:47 +0200] info [whostmgrd] 93.36.246.124 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 17:43:30 +0200] info [whostmgrd] 68.183.9.16 - lkx00860264 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 17:43:30 +0200] info [whostmgrd] 146.190.63.248 - lkx00688788 "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 17:47:04 +0200] info [whostmgrd] 194.243.83.97 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 17:47:06 +0200] info [whostmgrd] 93.36.246.124 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 17:50:32 +0200] info [whostmgrd] 194.243.83.97 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 17:58:47 +0200] info [whostmgrd] 93.150.210.91 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 18:03:07 +0200] info [cpaneld] 93.36.246.124 - bangherangstudio "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password [2026-05-01 18:03:09 +0200] info [cpaneld] 93.36.246.124 - bangherangstudio "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: access denied for root, reseller, and user password [2026-05-01 18:04:20 +0200] info [whostmgrd] 93.36.246.124 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 18:04:24 +0200] info [whostmgrd] 93.36.246.124 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 18:04:24 +0200] info [whostmgrd] 93.36.246.124 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 18:23:48 +0200] info [whostmgrd] 165.227.173.41 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 18:28:44 +0200] info [whostmgrd] 88.240.234.117 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 18:41:15 +0200] info [whostmgrd] 88.240.234.117 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 19:10:13 +0200] info [whostmgrd] 207.154.197.113 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 19:10:15 +0200] info [whostmgrd] 138.68.86.32 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 19:15:25 +0200] info [whostmgrd] 128.199.182.55 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 19:39:16 +0200] info [whostmgrd] 134.122.28.88 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 20:08:14 +0200] info [whostmgrd] 163.245.218.243 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 20:08:15 +0200] info [whostmgrd] 163.245.218.243 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 20:11:03 +0200] info [whostmgrd] 88.240.234.117 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 20:16:18 +0200] info [whostmgrd] 157.245.113.227 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 20:40:51 +0200] info [whostmgrd] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 20:41:00 +0200] info [whostmgrd] 23.180.120.132 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 20:47:25 +0200] info [webmaild] 85.204.70.88 - - "GET /wp-includes/wlwmanifest.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 20:47:25 +0200] info [webmaild] 85.204.70.88 - - "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 20:47:25 +0200] info [webmaild] 85.204.70.88 - - "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 20:47:25 +0200] info [webmaild] 85.204.70.88 - - "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 20:47:25 +0200] info [webmaild] 85.204.70.88 - - "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 20:47:25 +0200] info [webmaild] 85.204.70.88 - - "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 20:47:26 +0200] info [webmaild] 85.204.70.88 - - "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 20:47:26 +0200] info [webmaild] 85.204.70.88 - - "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 20:47:26 +0200] info [webmaild] 85.204.70.88 - - "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-05-01 20:49:58 +0200] info [whostmgrd] 23.180.120.131 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect === 12. SESSIONI WHM/CPANEL ATTIVE === total 1396 drwx------. 2 root root 1339392 May 1 21:02 . drwx------. 5 root root 4096 May 1 21:02 .. -rw------- 1 root root 730 May 1 19:05 2026orcworlds@tregolfisailingweek.com:OA1z1SPeS0YDweEV -rw------- 1 root root 486 May 1 20:11 :2kgNxTq96xEsUUOB -rw------- 1 root root 623 May 1 19:10 :AdcUgbSnqYlLLIYK -rw------- 1 root root 485 May 1 20:40 :asmCQHHaEGUfEsHt -rw------- 1 root root 479 May 1 20:58 bangherangstudio:oAx_3sOkIcMwQRFy -rw------- 1 root root 376 May 1 18:28 :c55DR_6TNwxZR9oz -rw------- 1 root root 316 May 1 21:02 :DKpClJYrG0bqzRCZ -rw------- 1 root root 444 May 1 18:23 :hVktp8MSxvjh54RC -rw------- 1 root root 622 May 1 19:39 :iKgtriYoOeNnjEQy -rw------- 1 root root 494 May 1 18:47 info@giuseppeattanasio.com:kvCI2KTFBWPjW390 -rw------- 1 root root 488 May 1 20:08 :J9pxBI5f7iQ6eDkC -rw------- 1 root root 488 May 1 20:08 :JaatgsdD_lfMifd7 -rw------- 1 root root 486 May 1 20:41 :LSnSDEvxt5mNIvhi -rw------- 1 root root 630 May 1 19:10 :N9xZvSprqmqPkamX -rw------- 1 root root 553 May 1 21:03 root:tHj3k9e9rvvLS3Fy -rw------- 1 root root 376 May 1 18:41 :seIDCN7sQmz60FPe -rw------- 1 root root 692 May 1 19:07 web@villasilvia.it:sncxB8ZfR1BFccdo -rw------- 1 root root 624 May 1 19:15 :yegrrmBHNAmMggLp -rw------- 1 root root 485 May 1 20:49 :YTXF93ULKvuhWZvu -rw------- 1 root root 626 May 1 20:16 :ziyX_qfPbKalCGvY === 13. CONNESSIONI ESTABLISHED FULL === ESTAB 0 0 46.4.168.178:443 172.71.82.53:12676 users:(("httpd",pid=108094,fd=1042)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1990 users:(("imap-login",pid=97978,fd=92)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1227 users:(("imap-login",pid=97982,fd=22)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2362 users:(("imap-login",pid=97978,fd=55)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2530 users:(("imap-login",pid=97978,fd=86)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2085 users:(("imap-login",pid=97978,fd=57)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1234 users:(("imap-login",pid=97978,fd=81)) ESTAB 0 0 46.4.168.178:143 2.232.161.244:43098 users:(("imap-hibernate",pid=102522,fd=28)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1873 users:(("imap-login",pid=97978,fd=148)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1233 users:(("imap-login",pid=97978,fd=22)) ESTAB 0 0 46.4.168.178:993 37.116.225.242:49247 users:(("imap-login",pid=97978,fd=137)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1975 users:(("imap-login",pid=97978,fd=33)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2531 users:(("imap-login",pid=97982,fd=16)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1217 users:(("imap-login",pid=97978,fd=64)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2131 users:(("imap-login",pid=97978,fd=100)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2093 users:(("imap-login",pid=97982,fd=53)) ESTAB 0 0 46.4.168.178:993 40.104.160.37:59020 users:(("imap-login",pid=97978,fd=27)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2127 users:(("imap-login",pid=97982,fd=57)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1961 users:(("imap-login",pid=97982,fd=29)) ESTAB 0 0 46.4.168.178:993 52.98.217.5:12427 users:(("imap-login",pid=97982,fd=32)) ESTAB 0 46 46.4.168.178:993 93.148.93.41:1572 users:(("imap-login",pid=97978,fd=20)) ESTAB 0 0 46.4.168.178:993 37.116.225.242:49248 users:(("imap-login",pid=97978,fd=139)) ESTAB 0 0 46.4.168.178:993 195.32.6.182:16763 users:(("imap-login",pid=97978,fd=41)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1645 users:(("imap-login",pid=97982,fd=33)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1241 users:(("imap-login",pid=97978,fd=88)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2130 users:(("imap-login",pid=97982,fd=63)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2532 users:(("imap-login",pid=97978,fd=102)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2098 users:(("imap-login",pid=97978,fd=37)) ESTAB 0 0 127.0.0.1:27217 127.0.0.1:60654 users:(("mongod",pid=3326,fd=87)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1640 users:(("imap-login",pid=97978,fd=49)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1405 users:(("imap-login",pid=97978,fd=101)) ESTAB 0 0 46.4.168.178:993 109.55.182.13:22322 users:(("imap-login",pid=97982,fd=20)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1400 users:(("imap-login",pid=97982,fd=27)) ESTAB 0 0 46.4.168.178:993 195.32.6.182:16762 users:(("imap-login",pid=97978,fd=39)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1868 users:(("imap-login",pid=97978,fd=83)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1577 users:(("imap-login",pid=97978,fd=53)) ESTAB 0 0 46.4.168.178:143 176.179.3.40:49211 users:(("imap-login",pid=97978,fd=73)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1575 users:(("imap-login",pid=97978,fd=47)) ESTAB 0 0 46.4.168.178:993 40.101.3.71:5585 users:(("imap-login",pid=97982,fd=34)) ESTAB 0 0 46.4.168.178:993 109.55.182.13:22321 users:(("imap-login",pid=97978,fd=19)) ESTAB 0 0 46.4.168.178:993 195.32.6.182:16855 users:(("imap-login",pid=97978,fd=16)) ESTAB 0 0 46.4.168.178:143 2.232.161.244:43088 users:(("imap-hibernate",pid=102522,fd=44)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1870 users:(("imap-login",pid=97978,fd=145)) ESTAB 0 0 46.4.168.178:993 79.57.20.169:57408 users:(("imap-login",pid=97978,fd=91)) ESTAB 0 0 46.4.168.178:993 40.99.153.213:16305 users:(("imap-login",pid=97978,fd=115)) ESTAB 0 0 46.4.168.178:25 213.209.12.35:52210 users:(("exim",pid=158530,fd=12),("exim",pid=158530,fd=10)) ESTAB 0 0 46.4.168.178:993 2.232.161.244:64655 users:(("imap-login",pid=97978,fd=24)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2128 users:(("imap-login",pid=97982,fd=60)) ESTAB 0 0 127.0.0.1:60654 127.0.0.1:27217 users:(("jetbackupd",pid=12725,fd=6)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1869 users:(("imap-login",pid=97978,fd=85)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1659 users:(("imap-login",pid=97978,fd=74)) ESTAB 0 0 46.4.168.178:993 52.97.215.189:16664 users:(("imap-login",pid=97978,fd=129)) ESTAB 0 0 46.4.168.178:993 40.100.4.152:11011 users:(("imap-login",pid=97978,fd=32)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2379 users:(("imap-login",pid=97978,fd=59)) ESTAB 0 0 46.4.168.178:143 176.179.3.40:49208 users:(("imap-login",pid=97978,fd=67)) ESTAB 0 0 46.4.168.178:443 17.22.245.22:38922 users:(("httpd",pid=100085,fd=1037)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1402 users:(("imap-login",pid=97982,fd=36)) ESTAB 0 0 46.4.168.178:993 2.232.161.244:64656 users:(("imap-login",pid=97978,fd=61)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2390 users:(("imap-login",pid=97978,fd=93)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2126 users:(("imap-login",pid=97978,fd=98)) ESTAB 0 0 46.4.168.178:143 5.94.20.113:51715 users:(("imap-login",pid=97982,fd=96)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2378 users:(("imap-login",pid=97982,fd=21)) ESTAB 0 0 127.0.0.1:60508 127.0.0.1:27217 users:(("jetbackupd",pid=12726,fd=4),("jetbackupd",pid=12725,fd=4),("jetbackupd",pid=12680,fd=4)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1876 users:(("imap-login",pid=97978,fd=151)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1874 users:(("imap-login",pid=97978,fd=150)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2373 users:(("imap-login",pid=97978,fd=51)) ESTAB 0 1734 46.4.168.178:993 93.148.93.41:1574 users:(("imap-login",pid=97982,fd=23)) ESTAB 0 0 46.4.168.178:2087 93.36.246.124:14177 users:(("whostmgrd - ser",pid=158807,fd=14)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1262 users:(("imap-login",pid=97978,fd=113)) ESTAB 0 0 46.4.168.178:443 162.158.170.141:9545 users:(("httpd",pid=100513,fd=1041)) ESTAB 0 0 46.4.168.178:993 195.32.6.182:16758 users:(("imap-login",pid=97978,fd=29)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1576 users:(("imap-login",pid=97978,fd=52)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2079 users:(("imap-login",pid=97982,fd=50)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1403 users:(("imap-login",pid=97978,fd=31)) ESTAB 0 0 46.4.168.178:993 40.99.197.205:19175 users:(("imap-login",pid=97982,fd=41)) ESTAB 0 622 46.4.168.178:443 57.141.20.62:27238 users:(("httpd",pid=108094,fd=1037)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1215 users:(("imap-login",pid=97978,fd=79)) ESTAB 0 0 46.4.168.178:2087 93.36.246.124:14176 users:(("cpsrvd websocke",pid=143219,fd=14)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2371 users:(("imap-login",pid=97982,fd=47)) ESTAB 0 0 46.4.168.178:2087 93.36.246.124:23621 users:(("cpsrvd websocke",pid=142692,fd=14)) ESTAB 0 0 46.4.168.178:443 17.241.227.15:51508 users:(("httpd",pid=108094,fd=1041)) ESTAB 0 0 46.4.168.178:993 195.32.6.182:16766 users:(("imap-login",pid=97978,fd=43)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1658 users:(("imap-login",pid=97982,fd=52)) ESTAB 0 0 46.4.168.178:993 52.98.152.69:24729 users:(("imap-login",pid=97982,fd=45)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2005 users:(("imap-login",pid=97978,fd=96)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1406 users:(("imap-login",pid=97982,fd=39)) ESTAB 0 46 46.4.168.178:993 93.148.93.41:1573 users:(("imap-login",pid=97982,fd=30)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2132 users:(("imap-login",pid=97982,fd=64)) ESTAB 0 0 46.4.168.178:993 52.98.195.101:13223 users:(("imap-login",pid=97978,fd=21)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:2372 users:(("imap-login",pid=97978,fd=50)) ESTAB 0 0 46.4.168.178:143 5.94.20.113:51723 users:(("imap-login",pid=97982,fd=98)) ESTAB 0 0 127.0.0.1:27217 127.0.0.1:60508 users:(("mongod",pid=3326,fd=5)) ESTAB 0 0 46.4.168.178:993 40.99.203.245:27587 users:(("imap-login",pid=97978,fd=25)) ESTAB 0 0 46.4.168.178:993 93.148.93.41:1248 users:(("imap-login",pid=97982,fd=19)) === 14. PORTE IN ASCOLTO TUTTE === State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess LISTEN 0 128 127.0.0.1:27017 0.0.0.0:* users:(("mongod",pid=2856,fd=14)) LISTEN 0 900 0.0.0.0:3306 0.0.0.0:* users:(("mariadbd",pid=3340,fd=317)) LISTEN 0 50 0.0.0.0:587 0.0.0.0:* users:(("exim",pid=99495,fd=9)) LISTEN 0 45 0.0.0.0:2091 0.0.0.0:* users:(("cpdavd - accept",pid=3330,fd=6)) LISTEN 0 128 127.0.0.1:11211 0.0.0.0:* users:(("memcached",pid=2821,fd=26)) LISTEN 0 128 127.0.0.1:6379 0.0.0.0:* users:(("redis-server",pid=2896,fd=6)) LISTEN 0 2048 0.0.0.0:110 0.0.0.0:* users:(("pop3-login",pid=97983,fd=9),("pop3-login",pid=97980,fd=9),("dovecot",pid=97976,fd=49)) LISTEN 0 128 127.0.0.1:783 0.0.0.0:* users:(("spamd child",pid=102890,fd=6),("spamd child",pid=102889,fd=6),("spamd",pid=99404,fd=6)) LISTEN 0 2048 0.0.0.0:143 0.0.0.0:* users:(("imap-login",pid=97982,fd=9),("imap-login",pid=97978,fd=9),("dovecot",pid=97976,fd=39)) LISTEN 0 45 0.0.0.0:2095 0.0.0.0:* users:(("cpsrvd (SSL",pid=2839,fd=11)) LISTEN 0 128 0.0.0.0:111 0.0.0.0:* users:(("rpcbind",pid=1352,fd=4),("systemd",pid=1,fd=38)) LISTEN 0 511 0.0.0.0:80 0.0.0.0:* users:(("httpd",pid=108094,fd=3),("httpd",pid=108040,fd=3),("httpd",pid=107986,fd=3),("httpd",pid=104713,fd=3),("httpd",pid=100515,fd=3),("httpd",pid=100513,fd=3),("httpd",pid=100087,fd=3),("httpd",pid=100085,fd=3),("httpd",pid=100082,fd=3),("httpd",pid=100079,fd=3),("httpd",pid=4140,fd=3)) LISTEN 0 45 0.0.0.0:2096 0.0.0.0:* users:(("cpsrvd (SSL",pid=2839,fd=12)) LISTEN 0 50 0.0.0.0:465 0.0.0.0:* users:(("exim",pid=99495,fd=7)) LISTEN 0 128 127.0.0.1:27217 0.0.0.0:* users:(("mongod",pid=3326,fd=12)) LISTEN 0 128 0.0.0.0:53 0.0.0.0:* users:(("pdns_server",pid=2866,fd=7)) LISTEN 0 65 0.0.0.0:21 0.0.0.0:* users:(("pure-ftpd",pid=2824,fd=4)) LISTEN 0 128 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=2823,fd=3)) LISTEN 0 128 127.0.0.1:9080 0.0.0.0:* users:(("php-fpm",pid=2893,fd=7)) LISTEN 0 50 0.0.0.0:25 0.0.0.0:* users:(("exim",pid=99495,fd=5)) LISTEN 0 10 127.0.0.1:953 0.0.0.0:* users:(("pdns_server",pid=2866,fd=9)) LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("httpd",pid=108094,fd=5),("httpd",pid=108040,fd=5),("httpd",pid=107986,fd=5),("httpd",pid=104713,fd=5),("httpd",pid=100515,fd=5),("httpd",pid=100513,fd=5),("httpd",pid=100087,fd=5),("httpd",pid=100085,fd=5),("httpd",pid=100082,fd=5),("httpd",pid=100079,fd=5),("httpd",pid=4140,fd=5)) LISTEN 0 128 127.0.0.1:9084 0.0.0.0:* users:(("php-fpm",pid=2849,fd=28)) LISTEN 0 45 0.0.0.0:2077 0.0.0.0:* users:(("cpdavd - accept",pid=3330,fd=5)) LISTEN 0 2048 0.0.0.0:4190 0.0.0.0:* users:(("managesieve-log",pid=97984,fd=9),("managesieve-log",pid=97979,fd=9),("dovecot",pid=97976,fd=46)) LISTEN 0 45 0.0.0.0:2078 0.0.0.0:* users:(("cpdavd - accept",pid=3330,fd=3)) LISTEN 0 45 0.0.0.0:2079 0.0.0.0:* users:(("cpdavd - accept",pid=3330,fd=4)) LISTEN 0 45 0.0.0.0:2080 0.0.0.0:* users:(("cpdavd - accept",pid=3330,fd=7)) LISTEN 0 2048 0.0.0.0:993 0.0.0.0:* users:(("imap-login",pid=97982,fd=11),("imap-login",pid=97978,fd=11),("dovecot",pid=97976,fd=41)) LISTEN 0 45 0.0.0.0:2082 0.0.0.0:* users:(("cpsrvd (SSL",pid=2839,fd=3)) LISTEN 0 2048 0.0.0.0:995 0.0.0.0:* users:(("pop3-login",pid=97983,fd=11),("pop3-login",pid=97980,fd=11),("dovecot",pid=97976,fd=51)) LISTEN 0 45 0.0.0.0:2083 0.0.0.0:* users:(("cpsrvd (SSL",pid=2839,fd=5)) LISTEN 0 45 0.0.0.0:2086 0.0.0.0:* users:(("cpsrvd (SSL",pid=2839,fd=4)) LISTEN 0 45 0.0.0.0:2087 0.0.0.0:* users:(("cpsrvd (SSL",pid=2839,fd=6)) LISTEN 0 50 [::]:587 [::]:* users:(("exim",pid=99495,fd=8)) LISTEN 0 128 [::1]:11211 [::]:* users:(("memcached",pid=2821,fd=27)) LISTEN 0 128 [::1]:6379 [::]:* users:(("redis-server",pid=2896,fd=7)) LISTEN 0 2048 [::]:110 [::]:* users:(("pop3-login",pid=97983,fd=10),("pop3-login",pid=97980,fd=10),("dovecot",pid=97976,fd=50)) LISTEN 0 128 [::1]:783 [::]:* users:(("spamd child",pid=102890,fd=5),("spamd child",pid=102889,fd=5),("spamd",pid=99404,fd=5)) LISTEN 0 2048 [::]:143 [::]:* users:(("imap-login",pid=97982,fd=10),("imap-login",pid=97978,fd=10),("dovecot",pid=97976,fd=40)) LISTEN 0 128 [::]:111 [::]:* users:(("rpcbind",pid=1352,fd=6),("systemd",pid=1,fd=40)) LISTEN 0 511 [::]:80 [::]:* users:(("httpd",pid=108094,fd=4),("httpd",pid=108040,fd=4),("httpd",pid=107986,fd=4),("httpd",pid=104713,fd=4),("httpd",pid=100515,fd=4),("httpd",pid=100513,fd=4),("httpd",pid=100087,fd=4),("httpd",pid=100085,fd=4),("httpd",pid=100082,fd=4),("httpd",pid=100079,fd=4),("httpd",pid=4140,fd=4)) LISTEN 0 50 [::]:465 [::]:* users:(("exim",pid=99495,fd=6)) LISTEN 0 128 *:4949 *:* users:(("munin-node",pid=101716,fd=5)) LISTEN 0 128 [::]:53 [::]:* users:(("pdns_server",pid=2866,fd=8)) LISTEN 0 65 [::]:21 [::]:* users:(("pure-ftpd",pid=2824,fd=5)) LISTEN 0 128 [::]:22 [::]:* users:(("sshd",pid=2823,fd=4)) LISTEN 0 50 [::]:25 [::]:* users:(("exim",pid=99495,fd=4)) LISTEN 0 511 [::]:443 [::]:* users:(("httpd",pid=108094,fd=6),("httpd",pid=108040,fd=6),("httpd",pid=107986,fd=6),("httpd",pid=104713,fd=6),("httpd",pid=100515,fd=6),("httpd",pid=100513,fd=6),("httpd",pid=100087,fd=6),("httpd",pid=100085,fd=6),("httpd",pid=100082,fd=6),("httpd",pid=100079,fd=6),("httpd",pid=4140,fd=6)) LISTEN 0 2048 [::]:4190 [::]:* users:(("managesieve-log",pid=97984,fd=10),("managesieve-log",pid=97979,fd=10),("dovecot",pid=97976,fd=47)) LISTEN 0 2048 [::]:993 [::]:* users:(("imap-login",pid=97982,fd=12),("imap-login",pid=97978,fd=12),("dovecot",pid=97976,fd=42)) LISTEN 0 2048 [::]:995 [::]:* users:(("pop3-login",pid=97983,fd=12),("pop3-login",pid=97980,fd=12),("dovecot",pid=97976,fd=52)) === 15. PROCESSI FULL TREE === USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 2 0.0 0.0 0 0 ? S 17:39 0:00 [kthreadd] root 3 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [rcu_gp] root 4 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [rcu_par_gp] root 5 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [slub_flushwq] root 7 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/0:0H-events_highpri] root 10 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [mm_percpu_wq] root 11 0.0 0.0 0 0 ? S 17:39 0:00 \_ [rcu_tasks_rude_] root 12 0.0 0.0 0 0 ? S 17:39 0:00 \_ [rcu_tasks_trace] root 13 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/0] root 14 0.0 0.0 0 0 ? I 17:39 0:04 \_ [rcu_sched] root 15 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/0] root 16 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/0] root 17 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/0] root 18 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/1] root 19 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/1] root 20 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/1] root 21 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/1] root 23 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/1:0H-events_highpri] root 24 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/2] root 25 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/2] root 26 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/2] root 27 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/2] root 29 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/2:0H-events_highpri] root 30 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/3] root 31 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/3] root 32 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/3] root 33 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/3] root 35 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/3:0H-events_highpri] root 36 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/4] root 37 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/4] root 38 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/4] root 39 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/4] root 41 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/4:0H-events_highpri] root 42 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/5] root 43 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/5] root 44 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/5] root 45 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/5] root 47 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/5:0H-events_highpri] root 48 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/6] root 49 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/6] root 50 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/6] root 51 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/6] root 53 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/6:0H-events_highpri] root 54 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/7] root 55 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/7] root 56 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/7] root 57 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/7] root 59 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/7:0H-events_highpri] root 60 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/8] root 61 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/8] root 62 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/8] root 63 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/8] root 65 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/8:0H-events_highpri] root 66 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/9] root 67 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/9] root 68 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/9] root 69 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/9] root 71 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/9:0H-events_highpri] root 72 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/10] root 73 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/10] root 74 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/10] root 75 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/10] root 77 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/10:0H-events_highpri] root 78 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/11] root 79 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/11] root 80 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/11] root 81 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/11] root 83 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/11:0H-events_highpri] root 84 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/12] root 85 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/12] root 86 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/12] root 87 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/12] root 89 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/12:0H-events_highpri] root 90 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/13] root 91 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/13] root 92 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/13] root 93 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/13] root 95 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/13:0H-events_highpri] root 96 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/14] root 97 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/14] root 98 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/14] root 99 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/14] root 101 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/14:0H-events_highpri] root 102 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/15] root 103 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/15] root 104 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/15] root 105 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/15] root 107 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/15:0H-events_highpri] root 108 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/16] root 109 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/16] root 110 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/16] root 111 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/16] root 113 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/16:0H-events_highpri] root 114 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/17] root 115 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/17] root 116 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/17] root 117 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/17] root 119 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/17:0H-events_highpri] root 120 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/18] root 121 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/18] root 122 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/18] root 123 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/18] root 125 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/18:0H-events_highpri] root 126 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/19] root 127 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/19] root 128 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/19] root 129 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/19] root 131 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/19:0H-events_highpri] root 132 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/20] root 133 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/20] root 134 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/20] root 135 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/20] root 137 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/20:0H-events_highpri] root 138 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/21] root 139 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/21] root 140 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/21] root 141 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/21] root 143 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/21:0H-events_highpri] root 144 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/22] root 145 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/22] root 146 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/22] root 147 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/22] root 149 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/22:0H-events_highpri] root 150 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/23] root 151 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/23] root 152 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/23] root 153 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/23] root 155 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/23:0H-kblockd] root 156 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/24] root 157 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/24] root 158 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/24] root 159 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/24] root 161 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/24:0H-events_highpri] root 162 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/25] root 163 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/25] root 164 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/25] root 165 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/25] root 167 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/25:0H-events_highpri] root 168 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/26] root 169 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/26] root 170 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/26] root 171 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/26] root 173 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/26:0H-events_highpri] root 174 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/27] root 175 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/27] root 176 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/27] root 177 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/27] root 179 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/27:0H-events_highpri] root 180 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/28] root 181 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/28] root 182 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/28] root 183 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/28] root 185 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/28:0H-events_highpri] root 186 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/29] root 187 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/29] root 188 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/29] root 189 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/29] root 191 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/29:0H-events_highpri] root 192 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/30] root 193 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/30] root 194 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/30] root 195 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/30] root 197 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/30:0H-events_highpri] root 198 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/31] root 199 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/31] root 200 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/31] root 201 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/31] root 203 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/31:0H-events_highpri] root 204 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/32] root 205 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/32] root 206 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/32] root 207 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/32] root 209 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/32:0H-events_highpri] root 210 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/33] root 211 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/33] root 212 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/33] root 213 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/33] root 215 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/33:0H-events_highpri] root 216 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/34] root 217 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/34] root 218 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/34] root 219 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/34] root 221 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/34:0H-events_highpri] root 222 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/35] root 223 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/35] root 224 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/35] root 225 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/35] root 227 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/35:0H-events_highpri] root 228 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/36] root 229 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/36] root 230 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/36] root 231 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/36] root 233 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/36:0H-events_highpri] root 234 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/37] root 235 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/37] root 236 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/37] root 237 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/37] root 239 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/37:0H-events_highpri] root 240 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/38] root 241 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/38] root 242 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/38] root 243 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/38] root 245 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/38:0H-events_highpri] root 246 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/39] root 247 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/39] root 248 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/39] root 249 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/39] root 251 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/39:0H-events_highpri] root 252 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/40] root 253 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/40] root 254 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/40] root 255 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/40] root 257 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/40:0H-events_highpri] root 258 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/41] root 259 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/41] root 260 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/41] root 261 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/41] root 263 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/41:0H-events_highpri] root 264 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/42] root 265 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/42] root 266 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/42] root 267 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/42] root 269 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/42:0H-events_highpri] root 270 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/43] root 271 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/43] root 272 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/43] root 273 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/43] root 275 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/43:0H-events_highpri] root 276 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/44] root 277 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/44] root 278 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/44] root 279 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/44] root 281 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/44:0H-events_highpri] root 282 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/45] root 283 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/45] root 284 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/45] root 285 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/45] root 287 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/45:0H-events_highpri] root 288 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/46] root 289 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/46] root 290 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/46] root 291 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/46] root 293 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/46:0H-events_highpri] root 294 0.0 0.0 0 0 ? S 17:39 0:00 \_ [cpuhp/47] root 295 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdog/47] root 296 0.0 0.0 0 0 ? S 17:39 0:00 \_ [migration/47] root 297 0.0 0.0 0 0 ? S 17:39 0:00 \_ [ksoftirqd/47] root 299 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/47:0H-events_highpri] root 348 0.0 0.0 0 0 ? S 17:39 0:00 \_ [kdevtmpfs] root 349 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [netns] root 350 0.0 0.0 0 0 ? S 17:39 0:00 \_ [kauditd] root 354 0.0 0.0 0 0 ? S 17:39 0:00 \_ [khungtaskd] root 355 0.0 0.0 0 0 ? S 17:39 0:00 \_ [oom_reaper] root 356 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [writeback] root 357 0.0 0.0 0 0 ? S 17:39 0:00 \_ [kcompactd0] root 358 0.0 0.0 0 0 ? SN 17:39 0:00 \_ [ksmd] root 360 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [crypto] root 361 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kintegrityd] root 362 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kblockd] root 363 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [blkcg_punt_bio] root 410 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [tpm_dev_wq] root 411 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [md] root 412 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [md_bitmap] root 413 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [edac-poller] root 414 0.0 0.0 0 0 ? S 17:39 0:00 \_ [watchdogd] root 416 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/1:1H-kblockd] root 436 0.0 0.0 0 0 ? R 17:39 0:05 \_ [kswapd0] root 497 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kthrotld] root 498 0.0 0.0 0 0 ? S 17:39 0:00 \_ [irq/32-pciehp] root 499 0.0 0.0 0 0 ? S 17:39 0:00 \_ [irq/33-pciehp] root 500 0.0 0.0 0 0 ? S 17:39 0:00 \_ [irq/43-pciehp] root 501 0.0 0.0 0 0 ? S 17:39 0:00 \_ [irq/44-pciehp] root 502 0.0 0.0 0 0 ? S 17:39 0:00 \_ [irq/45-pciehp] root 503 0.0 0.0 0 0 ? S 17:39 0:00 \_ [irq/46-pciehp] root 504 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [acpi_thermal_pm] root 505 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kmpath_rdacd] root 506 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kaluad] root 507 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [ipv6_addrconf] root 508 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kstrp] root 547 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [zswap-shrink] root 561 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/2:1H-kblockd] root 569 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/29:1H-kblockd] root 597 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/28:1H-kblockd] root 598 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/30:1H-kblockd] root 602 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/33:1H-kblockd] root 607 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/31:1H-kblockd] root 610 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/34:1H-kblockd] root 616 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/38:1H-kblockd] root 617 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/37:1H-kblockd] root 620 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/32:1H-kblockd] root 621 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/35:1H-kblockd] root 622 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/39:1H-kblockd] root 624 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/42:1H-kblockd] root 626 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/45:1H-kblockd] root 627 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/47:1H-kblockd] root 629 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/36:1H-kblockd] root 631 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/43:1H-kblockd] root 633 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/46:1H-kblockd] root 639 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/41:1H-kblockd] root 641 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/16:1H-kblockd] root 744 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [rpciod] root 745 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [xprtiod] root 809 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/18:1H-kblockd] root 862 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/44:1H-kblockd] root 894 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/4:1H-kblockd] root 906 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [nvme-wq] root 907 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [nvme-reset-wq] root 909 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [nvme-delete-wq] root 914 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [ata_sff] root 942 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [ixgbe] root 946 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/24:1H-kblockd] root 952 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/13:1H-kblockd] root 960 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/7:1H-kblockd] root 961 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/8:1H-kblockd] root 962 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/17:1H-kblockd] root 963 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/3:1H-kblockd] root 964 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/22:1H-kblockd] root 965 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/19:1H-kblockd] root 1032 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/14:1H-kblockd] root 1049 0.0 0.0 0 0 ? S 17:39 0:00 \_ [md1_raid1] root 1050 0.0 0.0 0 0 ? S 17:39 0:00 \_ [md2_raid1] root 1053 0.0 0.0 0 0 ? S 17:39 0:00 \_ [md3_raid1] root 1057 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/23:1H-kblockd] root 1058 0.0 0.0 0 0 ? S 17:39 0:00 \_ [md0_raid1] root 1060 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/9:1H-kblockd] root 1066 0.0 0.0 0 0 ? S 17:39 0:00 \_ [scsi_eh_0] root 1067 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [scsi_tmf_0] root 1068 0.0 0.0 0 0 ? S 17:39 0:00 \_ [scsi_eh_1] root 1069 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [scsi_tmf_1] root 1070 0.0 0.0 0 0 ? S 17:39 0:00 \_ [scsi_eh_2] root 1071 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [scsi_tmf_2] root 1072 0.0 0.0 0 0 ? S 17:39 0:00 \_ [scsi_eh_3] root 1073 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [scsi_tmf_3] root 1074 0.0 0.0 0 0 ? S 17:39 0:00 \_ [scsi_eh_4] root 1076 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [scsi_tmf_4] root 1077 0.0 0.0 0 0 ? S 17:39 0:00 \_ [scsi_eh_5] root 1078 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [scsi_tmf_5] root 1079 0.0 0.0 0 0 ? S 17:39 0:00 \_ [scsi_eh_6] root 1080 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [scsi_tmf_6] root 1081 0.0 0.0 0 0 ? S 17:39 0:00 \_ [scsi_eh_7] root 1082 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [scsi_tmf_7] root 1127 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/0:1H-kblockd] root 1128 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/26:1H-kblockd] root 1129 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/27:1H-kblockd] root 1130 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/25:1H-kblockd] root 1131 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/21:1H-kblockd] root 1132 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/20:1H-kblockd] root 1133 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/15:1H-kblockd] root 1134 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/12:1H-kblockd] root 1135 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/10:1H-kblockd] root 1136 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/6:1H-kblockd] root 1137 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/11:1H-kblockd] root 1138 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/40:1H-kblockd] root 1139 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [kworker/5:1H-kblockd] root 1166 0.0 0.0 0 0 ? S 17:39 0:01 \_ [jbd2/md3-8] root 1167 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [ext4-rsv-conver] root 1312 0.0 0.0 0 0 ? S 17:39 0:00 \_ [jbd2/md2-8] root 1313 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [ext4-rsv-conver] root 1471 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [ipmi-msghandler] root 1519 0.0 0.0 0 0 ? SN 17:39 0:00 \_ [kipmi0] root 1648 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [0000:f2:01.0] root 1652 0.0 0.0 0 0 ? S 17:39 0:00 \_ [irq/247-idxd-mi] root 1806 0.0 0.0 0 0 ? S< 17:39 0:00 \_ [loop0] root 1812 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [nfit] root 1817 0.0 0.0 0 0 ? S 17:39 0:00 \_ [jbd2/loop0-8] root 1818 0.0 0.0 0 0 ? I< 17:39 0:00 \_ [ext4-rsv-conver] root 2907 0.0 0.0 0 0 ? I< 17:40 0:00 \_ [ib-comp-wq] root 2908 0.0 0.0 0 0 ? I< 17:40 0:00 \_ [kworker/u97:0] root 2909 0.0 0.0 0 0 ? I< 17:40 0:00 \_ [ib-comp-unb-wq] root 2910 0.0 0.0 0 0 ? I< 17:40 0:00 \_ [ib_mcast] root 2911 0.0 0.0 0 0 ? I< 17:40 0:00 \_ [ib_nl_sa_wq] root 87599 0.0 0.0 0 0 ? I 18:50 0:00 \_ [kworker/20:3-mm_percpu_wq] root 93210 0.0 0.0 0 0 ? I 18:59 0:00 \_ [kworker/45:0-cgroup_destroy] root 104477 0.0 0.0 0 0 ? I 19:06 0:00 \_ [kworker/25:3-events] root 104666 0.0 0.0 0 0 ? I 19:07 0:00 \_ [kworker/46:1-mm_percpu_wq] root 109341 0.0 0.0 0 0 ? I 19:15 0:00 \_ [kworker/24:0-cgroup_pidlist_destroy] root 109449 0.0 0.0 0 0 ? I 19:16 0:00 \_ [kworker/46:0-events] root 112323 0.0 0.0 0 0 ? I 19:23 0:00 \_ [kworker/26:1-mm_percpu_wq] root 118231 0.0 0.0 0 0 ? I 19:44 0:00 \_ [kworker/31:3-cgroup_pidlist_destroy] root 119362 0.0 0.0 0 0 ? I 19:47 0:00 \_ [kworker/14:2-cgroup_destroy] root 119495 0.0 0.0 0 0 ? I 19:47 0:00 \_ [kworker/7:0-cgroup_destroy] root 120347 0.0 0.0 0 0 ? I 19:50 0:00 \_ [kworker/16:2-events] root 121102 0.0 0.0 0 0 ? I 19:51 0:00 \_ [kworker/16:3-cgroup_destroy] root 122702 0.0 0.0 0 0 ? I 19:57 0:00 \_ [kworker/11:0-events] root 122829 0.0 0.0 0 0 ? I 19:58 0:00 \_ [kworker/27:0-cgroup_destroy] root 126901 0.0 0.0 0 0 ? I 20:07 0:00 \_ [kworker/28:1-events] root 127170 0.0 0.0 0 0 ? I 20:09 0:00 \_ [kworker/20:0-cgroup_pidlist_destroy] root 127745 0.0 0.0 0 0 ? I 20:10 0:00 \_ [kworker/37:0-cgroup_destroy] root 128151 0.0 0.0 0 0 ? I 20:10 0:00 \_ [kworker/27:2-events] root 128157 0.0 0.0 0 0 ? I 20:10 0:00 \_ [kworker/24:3-events] root 128179 0.0 0.0 0 0 ? I 20:10 0:00 \_ [kworker/23:2-events] root 128898 0.0 0.0 0 0 ? I 20:15 0:00 \_ [kworker/34:3-cgroup_pidlist_destroy] root 129597 0.0 0.0 0 0 ? I 20:15 0:00 \_ [kworker/15:1-cgroup_destroy] root 129608 0.0 0.0 0 0 ? I 20:15 0:00 \_ [kworker/25:1-cgroup_pidlist_destroy] root 129623 0.0 0.0 0 0 ? I 20:15 0:00 \_ [kworker/44:1-cgroup_pidlist_destroy] root 129717 0.0 0.0 0 0 ? I 20:16 0:00 \_ [kworker/35:1-cgroup_pidlist_destroy] root 129911 0.0 0.0 0 0 ? I 20:18 0:00 \_ [kworker/12:0-cgroup_pidlist_destroy] root 129936 0.0 0.0 0 0 ? I 20:18 0:00 \_ [kworker/43:2-cgroup_pidlist_destroy] root 130528 0.0 0.0 0 0 ? I 20:20 0:00 \_ [kworker/42:0-cgroup_destroy] root 131202 0.0 0.0 0 0 ? I 20:20 0:00 \_ [kworker/29:1-cgroup_pidlist_destroy] root 131223 0.0 0.0 0 0 ? I 20:20 0:00 \_ [kworker/15:2-cgroup_pidlist_destroy] root 131843 0.0 0.0 0 0 ? I 20:25 0:00 \_ [kworker/22:0-ipv6_addrconf] root 132156 0.0 0.0 0 0 ? I 20:25 0:00 \_ [kworker/1:0-cgroup_destroy] root 132564 0.0 0.0 0 0 ? I 20:25 0:00 \_ [kworker/3:3-cgroup_pidlist_destroy] root 132573 0.0 0.0 0 0 ? I 20:25 0:00 \_ [kworker/17:3-cgroup_destroy] root 132584 0.0 0.0 0 0 ? I 20:25 0:00 \_ [kworker/21:1-events] root 132681 0.0 0.0 0 0 ? I 20:26 0:01 \_ [kworker/34:1-events] root 133000 0.0 0.0 0 0 ? I 20:29 0:00 \_ [kworker/30:2-cgroup_pidlist_destroy] root 134009 0.0 0.0 0 0 ? I 20:30 0:00 \_ [kworker/33:0-mm_percpu_wq] root 134112 0.0 0.0 0 0 ? I 20:31 0:00 \_ [kworker/5:1-events] root 134139 0.0 0.0 0 0 ? I 20:31 0:00 \_ [kworker/6:1-cgroup_pidlist_destroy] root 134309 0.0 0.0 0 0 ? I 20:33 0:00 \_ [kworker/9:0-cgroup_pidlist_destroy] root 134554 0.0 0.0 0 0 ? I 20:33 0:00 \_ [kworker/u96:4-md_bitmap] root 134592 0.0 0.0 0 0 ? I 20:34 0:00 \_ [kworker/13:1-events] root 135796 0.0 0.0 0 0 ? I 20:37 0:00 \_ [kworker/5:0-ipv6_addrconf] root 135999 0.0 0.0 0 0 ? I 20:39 0:00 \_ [kworker/6:3-events] root 136014 0.0 0.0 0 0 ? I 20:39 0:00 \_ [kworker/8:2-cgroup_destroy] root 136032 0.0 0.0 0 0 ? I 20:39 0:00 \_ [kworker/7:3-events] root 136040 0.0 0.0 0 0 ? I 20:39 0:00 \_ [kworker/32:2-events] root 136229 0.0 0.0 0 0 ? I 20:40 0:00 \_ [kworker/29:3-cgroup_pidlist_destroy] root 136321 0.0 0.0 0 0 ? I 20:40 0:00 \_ [kworker/44:0-events] root 136350 0.0 0.0 0 0 ? I 20:40 0:00 \_ [kworker/31:0-mm_percpu_wq] root 137024 0.0 0.0 0 0 ? I 20:40 0:00 \_ [kworker/4:1-mm_percpu_wq] root 137051 0.0 0.0 0 0 ? I 20:40 0:00 \_ [kworker/19:2-events] root 137174 0.0 0.0 0 0 ? I 20:41 0:00 \_ [kworker/41:0-cgroup_destroy] root 137258 0.0 0.0 0 0 ? I 20:42 0:00 \_ [kworker/2:0-events] root 137262 0.0 0.0 0 0 ? I 20:42 0:00 \_ [kworker/2:1-mm_percpu_wq] root 137263 0.0 0.0 0 0 ? I 20:42 0:00 \_ [kworker/33:1-cgroup_pidlist_destroy] root 137347 0.0 0.0 0 0 ? I 20:43 0:00 \_ [kworker/18:0-cgroup_destroy] root 137366 0.0 0.0 0 0 ? I 20:43 0:00 \_ [kworker/22:1-events] root 137439 0.0 0.0 0 0 ? I 20:44 0:00 \_ [kworker/34:0-cgroup_destroy] root 137455 0.0 0.0 0 0 ? I 20:44 0:00 \_ [kworker/30:0-mm_percpu_wq] root 137471 0.0 0.0 0 0 ? I 20:44 0:00 \_ [kworker/11:2-cgroup_pidlist_destroy] root 137833 0.0 0.0 0 0 ? I 20:45 0:00 \_ [kworker/28:2-events] root 138132 0.0 0.0 0 0 ? I 20:45 0:00 \_ [kworker/42:1-events] root 138544 0.0 0.0 0 0 ? I 20:45 0:00 \_ [kworker/40:2-cgroup_pidlist_destroy] root 138558 0.0 0.0 0 0 ? I 20:45 0:00 \_ [kworker/45:2-cgroup_pidlist_destroy] root 138569 0.0 0.0 0 0 ? I 20:45 0:00 \_ [kworker/4:2-mm_percpu_wq] root 138631 0.0 0.0 0 0 ? I 20:46 0:00 \_ [kworker/10:0-cgroup_pidlist_destroy] root 138658 0.0 0.0 0 0 ? I 20:46 0:00 \_ [kworker/39:0-events] root 138769 0.0 0.0 0 0 ? I 20:47 0:00 \_ [kworker/14:0-events] root 138786 0.0 0.0 0 0 ? I 20:47 0:00 \_ [kworker/41:2-cgroup_pidlist_destroy] root 138832 0.0 0.0 0 0 ? I 20:47 0:00 \_ [kworker/8:0-cgroup_pidlist_destroy] root 138847 0.0 0.0 0 0 ? I 20:47 0:00 \_ [kworker/36:2-mm_percpu_wq] root 138899 0.0 0.0 0 0 ? I 20:47 0:00 \_ [kworker/38:2-cgroup_pidlist_destroy] root 139189 0.0 0.0 0 0 ? I 20:47 0:00 \_ [kworker/19:3-events] root 139207 0.0 0.0 0 0 ? I 20:47 0:00 \_ [kworker/u96:0-md_bitmap] root 139256 0.0 0.0 0 0 ? I 20:48 0:00 \_ [kworker/43:1-mm_percpu_wq] root 139523 0.0 0.0 0 0 ? I 20:49 0:00 \_ [kworker/18:3-events] root 140499 0.0 0.0 0 0 ? I 20:50 0:00 \_ [kworker/32:0-mm_percpu_wq] root 140506 0.0 0.0 0 0 ? I 20:50 0:00 \_ [kworker/0:1-events] root 140523 0.0 0.0 0 0 ? I 20:50 0:00 \_ [kworker/23:0-events] root 140527 0.0 0.0 0 0 ? I 20:50 0:00 \_ [kworker/u96:1-events_unbound] root 140607 0.0 0.0 0 0 ? I 20:51 0:00 \_ [kworker/13:2-events] root 140624 0.0 0.0 0 0 ? I 20:51 0:00 \_ [kworker/47:1-cgroup_pidlist_destroy] root 140625 0.0 0.0 0 0 ? I 20:51 0:00 \_ [kworker/47:3-mm_percpu_wq] root 140759 0.0 0.0 0 0 ? I 20:52 0:00 \_ [kworker/9:1-cgroup_destroy] root 140783 0.0 0.0 0 0 ? I 20:53 0:00 \_ [kworker/35:0-events] root 140882 0.0 0.0 0 0 ? I 20:54 0:00 \_ [kworker/21:2] root 140891 0.0 0.0 0 0 ? I 20:54 0:00 \_ [kworker/12:2-cgroup_pidlist_destroy] root 140910 0.0 0.0 0 0 ? I 20:54 0:00 \_ [kworker/36:1-cgroup_pidlist_destroy] root 140931 0.0 0.0 0 0 ? I 20:54 0:00 \_ [kworker/3:0-events] root 141080 0.0 0.0 0 0 ? I 20:55 0:00 \_ [kworker/10:2-events] root 142038 0.0 0.0 0 0 ? I 20:55 0:00 \_ [kworker/1:2-events] root 142039 0.0 0.0 0 0 ? I 20:55 0:00 \_ [kworker/1:3-events] root 142048 0.0 0.0 0 0 ? I 20:55 0:00 \_ [kworker/37:1-cgroup_pidlist_destroy] root 142052 0.0 0.0 0 0 ? I 20:55 0:00 \_ [kworker/38:3-events] root 142156 0.0 0.0 0 0 ? I 20:56 0:00 \_ [kworker/17:0-mm_percpu_wq] root 142173 0.0 0.0 0 0 ? I 20:56 0:00 \_ [kworker/26:3-ipv6_addrconf] root 142221 0.0 0.0 0 0 ? I 20:57 0:00 \_ [kworker/37:2-cgroup_pidlist_destroy] root 142231 0.0 0.0 0 0 ? I 20:57 0:00 \_ [kworker/40:0-events] root 142249 0.0 0.0 0 0 ? I 20:57 0:00 \_ [kworker/39:1-mm_percpu_wq] root 142339 0.0 0.0 0 0 ? I 20:58 0:00 \_ [kworker/0:2-events] root 142517 0.0 0.0 0 0 ? I 20:59 0:00 \_ [kworker/9:2-events] root 143163 0.0 0.0 0 0 ? I 20:59 0:00 \_ [kworker/6:0-cgroup_destroy] root 143175 0.0 0.0 0 0 ? I 20:59 0:00 \_ [kworker/36:0-cgroup_destroy] root 143177 0.0 0.0 0 0 ? I 20:59 0:00 \_ [kworker/34:2-events] root 143182 0.0 0.0 0 0 ? I 20:59 0:00 \_ [kworker/22:2-mm_percpu_wq] root 143764 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/45:1-cgroup_pidlist_destroy] root 143765 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/45:3-mm_percpu_wq] root 144237 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/15:0-events] root 144248 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/3:1-cgroup_destroy] root 144278 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/12:1-events] root 145500 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/36:3-cgroup_pidlist_destroy] root 147102 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/18:1-cgroup_pidlist_destroy] root 147103 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/18:2] root 149378 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/15:3-events] root 149996 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/27:1-ipv6_addrconf] root 151023 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/35:2-events] root 151432 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/13:0-events] root 152955 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/29:0-cgroup_destroy] root 152958 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/29:2-events] root 154485 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/16:0-cgroup_pidlist_destroy] root 154486 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/16:1-events] root 155248 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/3:2-mm_percpu_wq] root 158326 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/20:1-cgroup_pidlist_destroy] root 158327 0.0 0.0 0 0 ? I 21:00 0:00 \_ [kworker/20:2-mm_percpu_wq] root 158401 0.0 0.0 0 0 ? I 21:01 0:00 \_ [kworker/6:2-cgroup_pidlist_destroy] root 158427 0.0 0.0 0 0 ? I 21:01 0:00 \_ [kworker/8:1-events] root 158428 0.0 0.0 0 0 ? I 21:01 0:00 \_ [kworker/8:3] root 158460 0.0 0.0 0 0 ? I 21:01 0:00 \_ [kworker/5:2-ipv6_addrconf] root 158519 0.0 0.0 0 0 ? I 21:02 0:00 \_ [kworker/41:1-events] root 158520 0.0 0.0 0 0 ? I 21:02 0:00 \_ [kworker/41:3-events] root 158531 0.0 0.0 0 0 ? I 21:02 0:00 \_ [kworker/24:1] root 158596 0.0 0.0 0 0 ? I 21:03 0:00 \_ [kworker/u96:2-ixgbe] root 158605 0.0 0.0 0 0 ? I 21:03 0:00 \_ [kworker/37:3-mm_percpu_wq] root 1 0.1 0.0 239668 12156 ? Ss 17:39 0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 17 root 1270 0.0 0.0 172008 56548 ? Ss 17:39 0:02 /usr/lib/systemd/systemd-journald rpc 1352 0.0 0.0 67332 5564 ? Ss 17:39 0:00 /usr/bin/rpcbind -w -f root 1353 0.0 0.0 57396 2304 ? S/dev/null echo "--- Binari python compilati in /tmp? ---" find /tmp -name "python3*" -type f -perm /111 2>/dev/null echo "" echo "=== 2. FILE MODIFICATI ULTIMI 3 GIORNI (esclusi log/cache) ===" find / -mtime -3 -type f 2>/dev/null | grep -vE "(proc|sys|run|log|cache|tmp/systemd|cpanel/session|cpanel/update|\.sock|\.pid|\.lock)" | head -200 echo "" echo "=== 3. FILE PHP CREATI ULTIMI 7 GIORNI ===" find /home -name "*.php" -mtime -7 -type f 2>/dev/null | head -50 echo "" echo "=== 4. WEBSHELL SIGNATURES IN PHP ===" grep -rlE "(eval\s*\(\s*base64_decode|eval\s*\(\s*gzinflate|eval\s*\(\s*str_rot13|system\s*\(\s*\\\$_|passthru|shell_exec\s*\(\s*\\\$_|exec\s*\(\s*\\\$_(GET|POST|REQUEST)|assert\s*\(\s*\\\$_|preg_replace.*\/e)" /home/*/public_html/ 2>/dev/null | head -30 echo "" echo "=== 5. FILE CON PERMESSI 777 IN PUBLIC_HTML ===" find /home/*/public_html -perm 777 -type f 2>/dev/null | head -30 echo "" echo "=== 6. CRONTAB COMPLETO ROOT ===" crontab -l 2>/dev/null echo "" echo "=== 7. CRONTAB TUTTI GLI UTENTI ===" for user in $(ls /var/cpanel/users/); do echo "--- $user ---"; crontab -u $user -l 2>/dev/null || echo "vuoto"; done echo "" echo "=== 8. /etc/cron.d CONTENUTO ===" ls -la /etc/cron.d/ echo "--- File non standard ---" for f in /etc/cron.d/*; do echo "=== $f ==="; cat "$f"; echo; done echo "" echo "=== 9. HISTORY ROOT ===" cat /root/.bash_history 2>/dev/null | tail -100 echo "" echo "=== 10. HISTORY BANGHERANGSTUDIO ===" cat /home/bangherangstudio/.bash_history 2>/dev/null | tail -50 echo "" echo "=== 11. LOGIN LOG CPANEL COMPLETO ===" grep "login" /usr/local/cpanel/logs/login_log 2>/dev/null | tail -100 echo "" echo "=== 12. SESSIONI WHM/CPANEL ATTIVE ===" ls -la /var/cpanel/sessions/raw/ 2>/dev/null echo "" echo "=== 13. CONNESSIONI ESTABLISHED FULL ===" ss -tnp | grep ESTAB echo "" echo "=== 14. PORTE IN ASCOLTO TUTTE ===" ss -tlnp echo "" echo "=== 15. PROCESSI FULL TREE ===" ps auxf echo "" echo "=== 16. LAST 100 ACCESSI ===" last -100 echo "" echo "=== 17. SECURE LOG COMPLETO OGGI ===" grep "May 1" /var/log/secure 2>/dev/null echo "" echo "=== 18. FILE .htaccess MODIFICATI RECENTEMENTE ===" find /home -name ".htaccess" -mtime -7 2>/dev/null echo "" echo "=== 19. UTENTI CPANEL ===" ls /var/cpanel/users/ echo "" echo "=== 20. CHIAVI SSH OVUNQUE ===" find / -name "authorized_keys*" -o -name "id_rsa*" -o -name "id_ed25519*" 2>/dev/null | grep -v proc echo "" echo "=== 21. IPTABLES REGOLE ATTUALI ===" iptables -L INPUT -n --line-numbers echo "" echo "=== 22. CSF DENY LIST ===" cat /etc/csf/csf.deny | grep -v "^#" | tail -30 echo "" echo "=== 23. DISK USAGE ===" df -h echo "" echo "=== 24. UPTIME E LOAD ===" uptime cat /proc/loadavg echo "" echo "==========================================" echo "AUDIT COMPLETATO - $(date)" echo "==========================================" root 158863 0.0 0.0 256460 4880 pts/0 R+ 21:03 0:00 | \_ ps auxf root 143219 0.0 0.0 378256 42944 ? S 20:59 0:00 \_ cpsrvd websocket - Shell root 143220 0.0 0.0 227308 8404 pts/1 Ss+ 20:59 0:00 | \_ /bin/bash -l root 158807 0.0 0.0 367764 38260 ? S 21:03 0:00 \_ whostmgrd - serving 93.36.246.124 root 2849 0.0 0.0 598352 35112 ? Ss 17:40 0:00 php-fpm: master process (/opt/cpanel/ea-php84/root/etc/php-fpm.conf) bangher+ 158799 6.9 0.0 636348 59708 ? S 21:03 0:00 \_ php-fpm: pool valeriocaprara_it mongod 2856 0.2 0.0 2642604 127664 ? Ssl 17:40 0:25 /usr/bin/mongod -f /etc/mongod.conf root 2862 0.1 0.4 5058640 1086076 ? Ssl 17:40 0:18 /usr/local/cpanel/3rdparty/bin/clamd -F named 2866 0.0 0.0 706196 61536 ? Ssl 17:40 0:01 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no root 2873 0.0 0.0 611144 35352 ? Ss 17:40 0:02 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) bangher+ 158825 12.5 0.0 629456 40248 ? R 21:03 0:00 \_ php-fpm: pool gialauyacht_com bangher+ 158830 0.0 0.0 610960 10992 ? S 21:03 0:00 \_ php-fpm: pool gialauyacht_com root 2880 0.0 0.0 498184 27504 ? Ss 17:40 0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf) bangher+ 158821 0.0 0.0 500280 20516 ? S 21:03 0:00 \_ php-fpm: pool innovazionediritto_it root 2889 0.0 0.0 669464 31884 ? Ss 17:40 0:00 php-fpm: master process (/opt/cpanel/ea-php85/root/etc/php-fpm.conf) root 2893 0.0 0.0 643736 36920 ? Ss 17:40 0:00 php-fpm: master process (/opt/cpanel/ea-php80/root/etc/php-fpm.conf) redis 2896 0.0 0.0 396612 12928 ? Ssl 17:40 0:07 /usr/bin/redis-server 127.0.0.1:6379 root 2923 0.0 0.0 233828 3664 ? Ss 17:40 0:00 /usr/sbin/crond -n root 2925 0.0 0.0 24508 1388 ? Ss 17:40 0:00 /usr/sbin/atd -f wp-tool+ 3088 0.0 0.0 516168 49716 ? Ss 17:40 0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php wp-tool+ 3093 0.0 0.0 541008 74492 ? Ss 17:40 0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php root 3209 0.0 0.0 675448 30068 ? Ss 17:40 0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf) root 3319 0.0 0.0 312320 25852 ? Ss 17:40 0:02 tailwatchd root 3325 0.0 0.0 269012 7588 ? Ss 17:40 0:00 dnsadmin - dormant mode mongod 3326 0.0 0.0 1624636 95808 ? Sl 17:40 0:08 /usr/local/jetapps/usr/bin/mongod --quiet -f /usr/local/jetapps/etc/mongod.conf run root 3330 0.0 0.0 285672 11348 ? Ss 17:40 0:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 (dormant) mysql 3340 5.6 18.5 198874732 48959240 ? Ssl 17:40 11:30 /usr/sbin/mariadbd root 3460 0.0 0.0 810508 41112 ? Ss 17:40 0:00 php-fpm: master process (/opt/cpanel/ea-php82/root/etc/php-fpm.conf) polkitd 3694 0.0 0.0 2008996 21576 ? Ssl 17:40 0:00 /usr/lib/polkit-1/polkitd --no-debug root 4140 0.0 0.0 297848 62872 ? Ss 17:40 0:00 /usr/sbin/httpd -k start nobody 100079 0.0 0.0 295416 24584 ? S 19:03 0:00 \_ /usr/sbin/httpd -k start nobody 100080 0.0 0.0 296672 30192 ? S 19:03 0:00 \_ /usr/sbin/httpd -k start root 100081 0.0 0.0 50188 14436 ? S 19:03 0:00 \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 100082 0.0 0.0 297848 27520 ? S 19:03 0:00 \_ /usr/sbin/httpd -k start nobody 100085 0.0 0.0 2189680 77636 ? Sl 19:03 0:05 \_ /usr/sbin/httpd -k start nobody 100087 0.0 0.0 2189680 76892 ? Sl 19:03 0:05 \_ /usr/sbin/httpd -k start nobody 100513 0.0 0.0 2189680 76664 ? Sl 19:03 0:06 \_ /usr/sbin/httpd -k start nobody 100515 0.0 0.0 2189680 77328 ? Sl 19:03 0:05 \_ /usr/sbin/httpd -k start nobody 104713 0.0 0.0 2189680 76688 ? Sl 19:07 0:05 \_ /usr/sbin/httpd -k start nobody 107986 0.0 0.0 2189680 75120 ? Sl 19:12 0:05 \_ /usr/sbin/httpd -k start nobody 108040 0.0 0.0 2189680 75224 ? Sl 19:12 0:05 \_ /usr/sbin/httpd -k start nobody 108094 0.0 0.0 2189680 75968 ? Sl 19:12 0:05 \_ /usr/sbin/httpd -k start root 12680 0.0 0.0 418692 21896 ? Ss 17:40 0:01 jetbackup5d-main root 12725 0.0 0.0 495668 29720 ? S 17:40 0:00 \_ jetbackup5d-scheduler root 12726 0.0 0.0 416644 15264 ? S 17:40 0:00 \_ jetbackup5d-socketapi root 16619 0.0 0.0 217784 888 tty1 Ss+ 17:41 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux root 97976 0.0 0.0 65200 8732 ? Ss 19:03 0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf root 97977 0.0 0.0 27204 6808 ? S 19:03 0:00 \_ dovecot/anvil dovenull 97978 0.0 0.0 53148 17540 ? S 19:03 0:01 \_ dovecot/imap-login dovenull 97979 0.0 0.0 43360 8832 ? S 19:03 0:00 \_ dovecot/managesieve-login dovenull 97980 0.0 0.0 41556 10636 ? S 19:03 0:00 \_ dovecot/pop3-login root 97981 0.0 0.0 27188 7036 ? S 19:03 0:00 \_ dovecot/log dovenull 97982 0.0 0.0 50980 15400 ? S 19:03 0:00 \_ dovecot/imap-login dovenull 97983 0.0 0.0 41648 10960 ? S 19:03 0:00 \_ dovecot/pop3-login dovenull 97984 0.0 0.0 43360 8952 ? S 19:03 0:00 \_ dovecot/managesieve-login root 97985 0.0 0.0 89568 14388 ? S 19:03 0:00 \_ dovecot/config dovecot 97986 0.0 0.0 28424 8224 ? S 19:03 0:00 \_ dovecot/stats dovecot 97987 0.0 0.0 52932 11720 ? S 19:03 0:02 \_ dovecot/auth bangher+ 102234 0.0 0.0 92620 13720 ? S 19:03 0:00 \_ dovecot/imap dovecot 102522 0.0 0.0 27356 7420 ? S 19:03 0:00 \_ dovecot/imap-hibernate bangher+ 102872 0.0 0.0 92704 13916 ? S 19:04 0:00 \_ dovecot/imap bangher+ 102877 0.0 0.0 92660 13372 ? S 19:04 0:00 \_ dovecot/imap bangher+ 103107 0.0 0.0 111776 16376 ? S 19:04 0:00 \_ dovecot/imap bangher+ 107948 0.0 0.0 92644 13836 ? S 19:12 0:00 \_ dovecot/imap bangher+ 107973 0.0 0.0 92644 14012 ? S 19:12 0:00 \_ dovecot/imap bangher+ 107975 0.0 0.0 111772 16652 ? S 19:12 0:00 \_ dovecot/imap bangher+ 135661 0.0 0.0 92084 13676 ? S 20:35 0:00 \_ dovecot/imap bangher+ 135662 0.0 0.0 92088 13400 ? S 20:35 0:00 \_ dovecot/imap bangher+ 135663 0.0 0.0 92084 13492 ? S 20:35 0:00 \_ dovecot/imap bangher+ 135664 0.0 0.0 91956 13236 ? S 20:35 0:00 \_ dovecot/imap bangher+ 135665 0.0 0.0 91956 13128 ? S 20:35 0:00 \_ dovecot/imap bangher+ 135666 0.0 0.0 91956 13100 ? S 20:35 0:00 \_ dovecot/imap bangher+ 135931 0.0 0.0 92056 13640 ? S 20:38 0:00 \_ dovecot/imap bangher+ 135935 0.0 0.0 92056 13696 ? S 20:38 0:00 \_ dovecot/imap bangher+ 135941 0.0 0.0 92048 13372 ? S 20:38 0:00 \_ dovecot/imap bangher+ 135948 0.0 0.0 92048 13488 ? S 20:38 0:00 \_ dovecot/imap bangher+ 137104 0.0 0.0 92056 13568 ? S 20:40 0:00 \_ dovecot/imap bangher+ 137105 0.0 0.0 92056 13552 ? S 20:40 0:00 \_ dovecot/imap bangher+ 137106 0.0 0.0 92048 13436 ? S 20:40 0:00 \_ dovecot/imap bangher+ 137365 0.0 0.0 92048 13400 ? S 20:43 0:00 \_ dovecot/imap bangher+ 137368 0.0 0.0 92056 13592 ? S 20:43 0:00 \_ dovecot/imap bangher+ 137370 0.0 0.0 92048 13524 ? S 20:43 0:00 \_ dovecot/imap bangher+ 137373 0.0 0.0 92056 13552 ? S 20:43 0:00 \_ dovecot/imap bangher+ 137392 0.0 0.0 92048 13448 ? S 20:43 0:00 \_ dovecot/imap bangher+ 138600 0.0 0.0 91956 13420 ? S 20:45 0:00 \_ dovecot/imap bangher+ 138601 0.0 0.0 92056 13732 ? S 20:45 0:00 \_ dovecot/imap bangher+ 138602 0.0 0.0 91956 13192 ? S 20:45 0:00 \_ dovecot/imap bangher+ 139413 0.0 0.0 92056 13580 ? S 20:48 0:00 \_ dovecot/imap bangher+ 139445 0.0 0.0 92048 13412 ? S 20:48 0:00 \_ dovecot/imap bangher+ 139458 0.0 0.0 92048 13412 ? S 20:48 0:00 \_ dovecot/imap bangher+ 139476 0.0 0.0 92056 13452 ? S 20:48 0:00 \_ dovecot/imap bangher+ 140548 0.0 0.0 92084 13664 ? S 20:50 0:00 \_ dovecot/imap bangher+ 140549 0.0 0.0 92084 13416 ? S 20:50 0:00 \_ dovecot/imap bangher+ 140550 0.0 0.0 92088 13384 ? S 20:50 0:00 \_ dovecot/imap bangher+ 140551 0.0 0.0 91956 13420 ? S 20:50 0:00 \_ dovecot/imap bangher+ 140552 0.0 0.0 91956 13280 ? S 20:50 0:00 \_ dovecot/imap bangher+ 140831 0.0 0.0 92056 13692 ? S 20:53 0:00 \_ dovecot/imap bangher+ 140836 0.0 0.0 92048 13572 ? S 20:53 0:00 \_ dovecot/imap bangher+ 140838 0.0 0.0 92056 13584 ? S 20:53 0:00 \_ dovecot/imap bangher+ 140848 0.0 0.0 92048 13676 ? S 20:53 0:00 \_ dovecot/imap bangher+ 142095 0.0 0.0 91956 13432 ? S 20:55 0:00 \_ dovecot/imap bangher+ 142096 0.0 0.0 92056 13480 ? S 20:55 0:00 \_ dovecot/imap bangher+ 142097 0.0 0.0 92056 13688 ? S 20:55 0:00 \_ dovecot/imap bangher+ 142122 0.0 0.0 92664 13924 ? S 20:55 0:00 \_ dovecot/imap bangher+ 142123 0.0 0.0 92680 13836 ? S 20:55 0:00 \_ dovecot/imap bangher+ 142358 0.0 0.0 92056 13392 ? S 20:58 0:00 \_ dovecot/imap bangher+ 142363 0.0 0.0 92048 13720 ? S 20:58 0:00 \_ dovecot/imap bangher+ 142369 0.0 0.0 92048 13256 ? S 20:58 0:00 \_ dovecot/imap bangher+ 142407 0.0 0.0 92056 13544 ? S 20:58 0:00 \_ dovecot/imap bangher+ 142488 0.0 0.0 92748 13752 ? S 20:59 0:00 \_ dovecot/imap bangher+ 158347 0.0 0.0 91956 13340 ? S 21:00 0:00 \_ dovecot/imap bangher+ 158351 0.0 0.0 91956 13260 ? S 21:00 0:00 \_ dovecot/imap bangher+ 158352 0.0 0.0 91956 13268 ? S 21:00 0:00 \_ dovecot/imap bangher+ 158431 0.0 0.0 87252 12884 ? S 21:01 0:00 \_ dovecot/quota-status -p postfix bangher+ 158613 0.0 0.0 96364 15840 ? S 21:03 0:00 \_ dovecot/imap bangher+ 158614 0.0 0.0 115184 16076 ? S 21:03 0:00 \_ dovecot/imap bangher+ 158615 0.0 0.0 115100 16188 ? S 21:03 0:00 \_ dovecot/imap bangher+ 158626 0.0 0.0 92280 13808 ? S 21:03 0:00 \_ dovecot/imap bangher+ 158722 0.0 0.0 92056 13392 ? S 21:03 0:00 \_ dovecot/imap bangher+ 158792 0.0 0.0 92048 13552 ? S 21:03 0:00 \_ dovecot/imap bangher+ 158804 0.0 0.0 92448 13888 ? S 21:03 0:00 \_ dovecot/imap bangher+ 158806 0.0 0.0 92268 13812 ? S 21:03 0:00 \_ dovecot/imap bangher+ 158828 0.0 0.0 92048 13552 ? S 21:03 0:00 \_ dovecot/imap bangher+ 158829 0.0 0.0 92048 13604 ? S 21:03 0:00 \_ dovecot/imap root 99371 0.0 0.0 294548 19008 ? Ss 19:03 0:00 queueprocd - waiting up to 60s to process a task root 99404 0.0 0.0 312724 175976 ? Ss 19:03 0:03 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 root 102889 0.1 0.0 330864 192400 ? S 19:04 0:13 \_ spamd child root 102890 0.0 0.0 325644 185948 ? S 19:04 0:01 \_ spamd child mailnull 99495 0.0 0.0 109252 22324 ? Ss 19:03 0:00 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid mailnull 158530 0.0 0.0 118420 27744 ? S 21:02 0:00 \_ /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid root 99974 0.0 0.0 235984 5172 ? SN 19:03 0:00 cpanellogd - sleeping for logs cpanelc+ 99985 0.0 0.0 23444 4500 ? Rs 19:03 0:02 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0 nscd 100059 0.0 0.0 1304948 5752 ? Ssl 19:03 0:00 /usr/sbin/nscd root 101679 0.0 0.0 412340 11608 ? Ss 19:03 0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf) root 101716 0.0 0.0 267664 13524 ? Ss 19:03 0:00 /usr/local/cpanel/3rdparty/bin/perl542 -wT /usr/local/cpanel/3rdparty/perl/542/sbin/munin-node root 101937 0.2 0.0 352272 42600 ? Ss 19:03 0:18 lfd - sleeping === 16. LAST 100 ACCESSI === root pts/1 46.4.50.47 Fri May 1 18:34 - 20:00 (01:26) root pts/1 46.4.50.47 Fri May 1 17:45 - 18:21 (00:35) root pts/0 212.105.155.26 Fri May 1 17:40 - 18:34 (00:54) reboot system boot 4.18.0-553.58.1. Fri May 1 17:39 still running root pts/9 212.105.153.107 Thu Apr 30 12:11 - 22:08 (09:57) root pts/10 46.4.168.178 Mon Apr 13 09:26 - 09:31 (00:05) root pts/10 93.35.197.135 Tue Apr 7 20:13 - 23:42 (03:29) root pts/10 93.35.197.135 Tue Apr 7 19:59 - 20:12 (00:13) root pts/9 93.35.197.135 Tue Apr 7 19:41 - 22:01 (02:20) root pts/9 93.150.212.59 Tue Apr 7 11:36 - 12:49 (01:13) root pts/8 93.35.197.135 Mon Mar 16 22:27 - 01:07 (02:40) root pts/8 2.237.150.226 Sat Mar 14 18:43 - 19:03 (00:20) root pts/8 93.150.213.57 Fri Mar 13 10:46 - 11:19 (00:33) root pts/5 2.237.150.226 Mon Mar 9 21:03 - 23:37 (02:34) root pts/5 2.237.150.226 Mon Mar 9 20:52 - 21:03 (00:10) root pts/5 2.45.100.88 Mon Mar 9 08:38 - 12:13 (03:35) root pts/5 2.45.100.88 Mon Mar 9 08:37 - 08:38 (00:00) root pts/5 2.45.100.88 Mon Mar 9 08:36 - 08:37 (00:00) root pts/7 93.35.198.144 Mon Mar 2 21:53 - 00:29 (02:36) root pts/7 93.35.198.144 Mon Mar 2 21:52 - 21:52 (00:00) root pts/7 93.35.198.144 Mon Mar 2 21:50 - 21:52 (00:01) root pts/5 93.150.213.4 Mon Mar 2 20:04 - 20:06 (00:01) root pts/5 93.150.213.4 Mon Mar 2 19:49 - 19:57 (00:07) root pts/5 2.45.100.88 Fri Feb 27 08:41 - 12:00 (03:18) root pts/5 93.150.218.89 Fri Feb 27 08:26 - 08:29 (00:02) root pts/5 93.150.218.89 Fri Feb 27 08:23 - 08:26 (00:02) root pts/6 93.35.198.144 Fri Feb 27 07:47 - 10:05 (02:17) root pts/5 93.35.198.144 Fri Feb 27 07:45 - 07:55 (00:10) root pts/5 93.35.198.144 Fri Feb 27 07:43 - 07:45 (00:01) root pts/5 93.35.198.144 Fri Feb 27 07:41 - 07:43 (00:01) root pts/5 93.35.198.144 Fri Feb 27 07:40 - 07:40 (00:00) root pts/6 93.35.198.144 Thu Feb 26 15:50 - 19:41 (03:51) root pts/6 93.35.198.144 Thu Feb 26 15:49 - 15:50 (00:01) root pts/6 93.150.210.180 Thu Feb 26 12:17 - 12:25 (00:08) root pts/5 194.243.83.97 Wed Feb 25 13:55 - 16:33 (02:37) root pts/5 194.243.83.97 Wed Feb 25 13:48 - 13:55 (00:07) root pts/5 194.243.83.97 Wed Feb 25 13:43 - 13:48 (00:04) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/6 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) root pts/5 93.36.246.124 Wed Feb 25 10:49 - 10:49 (00:00) banghera pts/5 194.243.83.97 Tue Feb 24 11:53 - 20:49 (08:56) root pts/5 93.150.219.123 Tue Feb 24 08:50 - 09:41 (00:51) banghera pts/5 195.32.6.182 Mon Feb 23 16:31 - 22:13 (05:42) banghera pts/5 93.35.198.144 Sun Feb 22 21:58 - 22:20 (00:21) banghera pts/6 93.35.198.144 Sun Feb 22 10:49 - 13:16 (02:27) banghera pts/5 93.35.198.144 Sun Feb 22 10:24 - 12:39 (02:14) banghera pts/8 93.35.198.144 Sun Feb 22 09:58 - 12:18 (02:19) banghera pts/7 93.35.198.144 Sun Feb 22 09:29 - 11:52 (02:22) banghera pts/6 93.35.198.144 Sun Feb 22 08:21 - 10:37 (02:15) banghera pts/5 93.35.198.144 Sun Feb 22 08:07 - 10:23 (02:15) banghera pts/6 93.35.198.144 Sat Feb 21 22:58 - 23:25 (00:26) banghera pts/5 93.35.198.144 Sat Feb 21 22:29 - 00:57 (02:28) banghera pts/5 93.35.198.144 Sat Feb 21 22:15 - 22:29 (00:14) banghera pts/5 194.243.83.97 Sat Feb 21 10:48 - 19:37 (08:49) banghera pts/6 93.36.246.124 Fri Feb 20 18:22 - 22:38 (04:15) root pts/5 93.36.246.124 Fri Feb 20 17:19 - 18:13 (00:54) banghera pts/5 194.243.83.97 Fri Feb 20 14:53 - 16:55 (02:01) banghera pts/5 194.243.83.97 Fri Feb 20 13:17 - 14:53 (01:35) root pts/5 93.35.198.144 Fri Feb 20 07:57 - 08:17 (00:19) root pts/5 93.150.208.232 Thu Feb 19 15:48 - 16:51 (01:03) root pts/5 93.150.208.232 Thu Feb 19 15:43 - 15:48 (00:05) root pts/5 93.150.208.232 Thu Feb 19 14:14 - 14:41 (00:26) root pts/5 93.150.208.232 Thu Feb 19 14:08 - 14:14 (00:05) root pts/5 93.35.198.144 Thu Feb 19 07:01 - 09:16 (02:14) root pts/5 93.35.198.144 Thu Feb 19 07:00 - 07:01 (00:00) banghera pts/6 195.32.6.182 Wed Feb 18 18:17 - 19:37 (01:19) root pts/5 2.45.100.88 Wed Feb 18 09:04 - 11:46 (02:41) root pts/5 2.45.100.88 Wed Feb 18 09:04 - 09:04 (00:00) root pts/5 2.45.100.88 Wed Feb 18 09:02 - 09:03 (00:01) root pts/8 2.45.100.88 Wed Feb 18 08:19 - 09:02 (00:42) root pts/7 93.35.198.144 Wed Feb 18 07:51 - 10:09 (02:18) root pts/7 93.35.198.144 Wed Feb 18 07:50 - 07:51 (00:00) root pts/6 93.35.198.144 Wed Feb 18 06:21 - 08:44 (02:22) root pts/6 93.35.198.144 Wed Feb 18 06:18 - 06:21 (00:03) root pts/6 93.35.198.144 Wed Feb 18 06:16 - 06:18 (00:01) wtmp begins Thu Dec 28 10:22:30 2023 === 17. SECURE LOG COMPLETO OGGI === May 1 00:00:01 pan systemd[2338377]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 00:00:01 pan systemd[2338387]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:00:01 pan systemd[2338402]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:00:54 pan sshd[2339256]: Invalid user from 176.65.132.24 port 40030 May 1 00:01:01 pan systemd[2339293]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:01:02 pan sshd[2339256]: Connection closed by invalid user 176.65.132.24 port 40030 [preauth] May 1 00:01:53 pan sshd[2339421]: error: kex_exchange_identification: Connection closed by remote host May 1 00:02:01 pan systemd[2339444]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:02:16 pan unix_chkpwd[2339634]: password check failed for user (root) May 1 00:02:16 pan sshd[2339632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.65.132.24 user=root May 1 00:02:18 pan sshd[2339632]: Failed password for root from 176.65.132.24 port 59056 ssh2 May 1 00:02:18 pan sshd[2339632]: Connection closed by authenticating user root 176.65.132.24 port 59056 [preauth] May 1 00:02:20 pan sshd[2339639]: Invalid user minecraft from 176.65.132.24 port 52376 May 1 00:02:20 pan sshd[2339639]: pam_unix(sshd:auth): check pass; user unknown May 1 00:02:20 pan sshd[2339639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.65.132.24 May 1 00:02:22 pan sshd[2339639]: Failed password for invalid user minecraft from 176.65.132.24 port 52376 ssh2 May 1 00:02:22 pan sshd[2339639]: Connection closed by invalid user minecraft 176.65.132.24 port 52376 [preauth] May 1 00:02:24 pan sshd[2339647]: Invalid user hamed from 176.65.132.24 port 52396 May 1 00:02:24 pan sshd[2339647]: pam_unix(sshd:auth): check pass; user unknown May 1 00:02:24 pan sshd[2339647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.65.132.24 May 1 00:02:26 pan sshd[2339647]: Failed password for invalid user hamed from 176.65.132.24 port 52396 ssh2 May 1 00:03:01 pan systemd[2339724]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:04:00 pan unix_chkpwd[2344829]: password check failed for user (root) May 1 00:04:00 pan sshd[2339840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.22.201.143 user=root May 1 00:04:01 pan systemd[2346182]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:04:02 pan sshd[2339840]: Failed password for root from 59.22.201.143 port 52382 ssh2 May 1 00:04:02 pan unix_chkpwd[2348017]: password check failed for user (root) May 1 00:04:05 pan sshd[2339840]: Failed password for root from 59.22.201.143 port 52382 ssh2 May 1 00:04:07 pan unix_chkpwd[2353350]: password check failed for user (root) May 1 00:04:09 pan sshd[2339840]: Failed password for root from 59.22.201.143 port 52382 ssh2 May 1 00:04:10 pan unix_chkpwd[2356015]: password check failed for user (root) May 1 00:04:12 pan sshd[2339840]: Failed password for root from 59.22.201.143 port 52382 ssh2 May 1 00:04:15 pan unix_chkpwd[2361542]: password check failed for user (root) May 1 00:04:17 pan sshd[2339840]: Failed password for root from 59.22.201.143 port 52382 ssh2 May 1 00:05:00 pan sshd[2407417]: error: kex_exchange_identification: Connection closed by remote host May 1 00:05:01 pan systemd[2408577]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:05:01 pan systemd[2408608]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:05:33 pan sshd[2438339]: Connection reset by 92.118.39.197 port 40774 [preauth] May 1 00:06:01 pan systemd[2464180]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:06:05 pan sshd[2467837]: error: kex_exchange_identification: Connection closed by remote host May 1 00:07:01 pan systemd[2521479]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:08:01 pan systemd[2584163]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:09:01 pan systemd[2643858]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:09:20 pan unix_chkpwd[2662809]: password check failed for user (root) May 1 00:09:20 pan sshd[2662726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.235 user=root May 1 00:09:22 pan sshd[2662726]: Failed password for root from 213.209.159.235 port 53298 ssh2 May 1 00:09:25 pan sshd[2662726]: Connection closed by authenticating user root 213.209.159.235 port 53298 [preauth] May 1 00:10:01 pan systemd[2702859]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:10:01 pan systemd[2702883]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:10:02 pan sshd[2703617]: Invalid user db2fenc1 from 47.91.2.120 port 38742 May 1 00:10:03 pan sshd[2703617]: pam_unix(sshd:auth): check pass; user unknown May 1 00:10:03 pan sshd[2703617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.91.2.120 May 1 00:10:05 pan sshd[2703617]: Failed password for invalid user db2fenc1 from 47.91.2.120 port 38742 ssh2 May 1 00:10:07 pan sshd[2703617]: Connection closed by invalid user db2fenc1 47.91.2.120 port 38742 [preauth] May 1 00:10:08 pan sshd[2710169]: Invalid user ubuntu from 47.91.2.120 port 34736 May 1 00:10:09 pan sshd[2710169]: pam_unix(sshd:auth): check pass; user unknown May 1 00:10:09 pan sshd[2710169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.91.2.120 May 1 00:10:10 pan sshd[2710169]: Failed password for invalid user ubuntu from 47.91.2.120 port 34736 ssh2 May 1 00:10:11 pan sshd[2710169]: Connection closed by invalid user ubuntu 47.91.2.120 port 34736 [preauth] May 1 00:10:12 pan unix_chkpwd[2714881]: password check failed for user (root) May 1 00:10:12 pan sshd[2713530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.91.2.120 user=root May 1 00:10:14 pan sshd[2713530]: Failed password for root from 47.91.2.120 port 34744 ssh2 May 1 00:11:01 pan systemd[2777770]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:12:01 pan systemd[2835528]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:13:01 pan systemd[2898441]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:14:01 pan systemd[2969680]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:15:01 pan systemd[3023994]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:15:01 pan systemd[3024028]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:16:01 pan systemd[3080641]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:17:01 pan systemd[3149602]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:18:01 pan systemd[3202872]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:18:06 pan sshd[3205537]: Invalid user ubuntu from 120.221.130.20 port 2585 May 1 00:18:06 pan sshd[3205537]: pam_unix(sshd:auth): check pass; user unknown May 1 00:18:06 pan sshd[3205537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.221.130.20 May 1 00:18:08 pan sshd[3205537]: Failed password for invalid user ubuntu from 120.221.130.20 port 2585 ssh2 May 1 00:18:08 pan sshd[3205537]: Connection closed by invalid user ubuntu 120.221.130.20 port 2585 [preauth] May 1 00:19:01 pan systemd[3256902]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:20:01 pan systemd[3320684]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:20:01 pan systemd[3320719]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:21:01 pan systemd[3378431]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:22:01 pan systemd[3432057]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:23:01 pan systemd[3493562]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:24:01 pan systemd[3547320]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:25:01 pan systemd[3598335]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:25:01 pan systemd[3598353]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:26:01 pan systemd[3634108]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:27:01 pan systemd[3673040]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:27:55 pan sshd[3725080]: error: kex_exchange_identification: Connection closed by remote host May 1 00:28:01 pan systemd[3731011]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:28:38 pan sshd[3757416]: Invalid user deploy from 8.134.129.191 port 42202 May 1 00:28:38 pan sshd[3757416]: pam_unix(sshd:auth): check pass; user unknown May 1 00:28:38 pan sshd[3757416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.134.129.191 May 1 00:28:40 pan sshd[3757416]: Failed password for invalid user deploy from 8.134.129.191 port 42202 ssh2 May 1 00:28:42 pan sshd[3757416]: Connection closed by invalid user deploy 8.134.129.191 port 42202 [preauth] May 1 00:28:43 pan unix_chkpwd[3757515]: password check failed for user (root) May 1 00:28:43 pan sshd[3757512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.134.129.191 user=root May 1 00:28:45 pan sshd[3757512]: Failed password for root from 8.134.129.191 port 42212 ssh2 May 1 00:28:46 pan sshd[3757512]: Connection closed by authenticating user root 8.134.129.191 port 42212 [preauth] May 1 00:28:47 pan sshd[3760534]: Invalid user www-data from 8.134.129.191 port 36122 May 1 00:28:47 pan sshd[3760534]: pam_unix(sshd:auth): check pass; user unknown May 1 00:28:47 pan sshd[3760534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.134.129.191 May 1 00:28:49 pan sshd[3760534]: Failed password for invalid user www-data from 8.134.129.191 port 36122 ssh2 May 1 00:28:50 pan sshd[3760534]: Connection closed by invalid user www-data 8.134.129.191 port 36122 [preauth] May 1 00:29:01 pan systemd[3762715]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:30:01 pan systemd[3827163]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:30:01 pan systemd[3827195]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:31:01 pan systemd[3879065]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:32:01 pan systemd[3933318]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:33:01 pan systemd[4005186]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:34:02 pan systemd[4069787]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:35:01 pan systemd[4141648]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:35:01 pan systemd[4141690]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:36:01 pan systemd[15581]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:37:01 pan systemd[81077]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:37:14 pan sshd[92855]: Invalid user gialauyacht from 213.209.159.228 port 41834 May 1 00:37:14 pan sshd[92855]: pam_unix(sshd:auth): check pass; user unknown May 1 00:37:14 pan sshd[92855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.228 May 1 00:37:16 pan sshd[92855]: Failed password for invalid user gialauyacht from 213.209.159.228 port 41834 ssh2 May 1 00:37:18 pan sshd[92855]: Connection closed by invalid user gialauyacht 213.209.159.228 port 41834 [preauth] May 1 00:38:01 pan systemd[121015]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:39:01 pan systemd[144235]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:40:01 pan systemd[147289]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:40:01 pan systemd[147297]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:40:58 pan sshd[209330]: Invalid user pensaunpo from 213.209.159.236 port 44878 May 1 00:40:58 pan sshd[209330]: pam_unix(sshd:auth): check pass; user unknown May 1 00:40:58 pan sshd[209330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.236 May 1 00:41:00 pan sshd[209330]: Failed password for invalid user pensaunpo from 213.209.159.236 port 44878 ssh2 May 1 00:41:01 pan systemd[212792]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:41:02 pan sshd[209330]: Connection closed by invalid user pensaunpo 213.209.159.236 port 44878 [preauth] May 1 00:42:01 pan systemd[276697]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:43:01 pan systemd[337654]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:44:01 pan systemd[379816]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:45:01 pan systemd[382316]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:45:01 pan systemd[382337]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:46:01 pan systemd[385690]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:47:01 pan systemd[436531]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:47:49 pan sudo[492378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 00:47:49 pan sudo[492378]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:49 pan sudo[492378]: pam_unix(sudo:session): session closed for user root May 1 00:47:49 pan sudo[492400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 00:47:49 pan sudo[492400]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:49 pan sudo[492400]: pam_unix(sudo:session): session closed for user root May 1 00:47:49 pan sudo[492419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 00:47:49 pan sudo[492419]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:49 pan sudo[492419]: pam_unix(sudo:session): session closed for user root May 1 00:47:49 pan sudo[492438]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 00:47:49 pan sudo[492438]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:49 pan sudo[492438]: pam_unix(sudo:session): session closed for user root May 1 00:47:49 pan sudo[492457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 00:47:49 pan sudo[492457]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:49 pan sudo[492457]: pam_unix(sudo:session): session closed for user root May 1 00:47:49 pan sudo[492475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 00:47:49 pan sudo[492475]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:49 pan sudo[492475]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493322]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 00:47:50 pan sudo[493322]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493322]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 00:47:50 pan sudo[493391]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493391]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 00:47:50 pan sudo[493578]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493578]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 00:47:50 pan sudo[493671]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493671]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GvvR4fNOy75MYJ6H.~ May 1 00:47:50 pan sudo[493693]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493693]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GvvR4fNOy75MYJ6H.~\'' May 1 00:47:50 pan sudo[493712]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493712]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GvvR4fNOy75MYJ6H.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 00:47:50 pan sudo[493733]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493733]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493753]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 00:47:50 pan sudo[493753]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493753]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 00:47:50 pan sudo[493851]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493851]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[493906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 00:47:50 pan sudo[493906]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[493906]: pam_unix(sudo:session): session closed for user root May 1 00:47:50 pan sudo[494005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 00:47:50 pan sudo[494005]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 00:47:50 pan sudo[494005]: pam_unix(sudo:session): session closed for user root May 1 00:48:01 pan systemd[507427]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:49:01 pan systemd[582103]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:50:01 pan systemd[656946]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:50:01 pan systemd[656980]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:51:01 pan systemd[716787]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:52:01 pan systemd[716889]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:53:01 pan systemd[717313]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:54:01 pan systemd[717540]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:54:50 pan sshd[717829]: error: kex_exchange_identification: Connection closed by remote host May 1 00:54:51 pan sshd[717830]: Connection closed by 176.32.193.16 port 37448 [preauth] May 1 00:55:01 pan systemd[717900]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:55:01 pan systemd[717910]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 00:55:01 pan systemd[717924]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 00:56:01 pan systemd[718756]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:57:01 pan systemd[718858]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:58:01 pan systemd[718978]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:59:01 pan systemd[719216]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 00:59:01 pan systemd[719221]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:00:01 pan systemd[719400]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:00:01 pan systemd[719414]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:00:01 pan systemd[719423]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:01:01 pan systemd[720296]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:02:01 pan systemd[720399]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:03:01 pan systemd[720507]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:04:01 pan systemd[720743]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:04:01 pan systemd[720747]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:05:01 pan systemd[720923]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:05:01 pan systemd[720940]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:05:01 pan systemd[720945]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:06:02 pan systemd[721727]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:07:01 pan systemd[721824]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:08:01 pan systemd[722165]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:08:08 pan sshd[722192]: Invalid user ediuser from 106.12.161.149 port 46524 May 1 01:08:08 pan sshd[722192]: pam_unix(sshd:auth): check pass; user unknown May 1 01:08:08 pan sshd[722192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.161.149 May 1 01:08:11 pan sshd[722192]: Failed password for invalid user ediuser from 106.12.161.149 port 46524 ssh2 May 1 01:08:13 pan sshd[722192]: Received disconnect from 106.12.161.149 port 46524:11: Bye Bye [preauth] May 1 01:08:13 pan sshd[722192]: Disconnected from invalid user ediuser 106.12.161.149 port 46524 [preauth] May 1 01:08:45 pan sshd[722368]: Invalid user iccsftpuser from 59.36.75.227 port 40770 May 1 01:08:45 pan sshd[722368]: pam_unix(sshd:auth): check pass; user unknown May 1 01:08:45 pan sshd[722368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.75.227 May 1 01:08:47 pan sshd[722368]: Failed password for invalid user iccsftpuser from 59.36.75.227 port 40770 ssh2 May 1 01:08:49 pan sshd[722368]: Received disconnect from 59.36.75.227 port 40770:11: Bye Bye [preauth] May 1 01:08:49 pan sshd[722368]: Disconnected from invalid user iccsftpuser 59.36.75.227 port 40770 [preauth] May 1 01:09:01 pan systemd[722402]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:09:01 pan systemd[722407]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:10:01 pan systemd[722572]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:10:01 pan systemd[722583]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:10:01 pan systemd[722592]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:10:09 pan sshd[722505]: Connection closed by 59.36.75.227 port 53810 [preauth] May 1 01:10:29 pan sshd[723317]: Connection closed by 59.36.75.227 port 57056 [preauth] May 1 01:10:40 pan sshd[723342]: Invalid user user from 59.36.75.227 port 60326 May 1 01:10:40 pan sshd[723342]: pam_unix(sshd:auth): check pass; user unknown May 1 01:10:40 pan sshd[723342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.75.227 May 1 01:10:43 pan sshd[723342]: Failed password for invalid user user from 59.36.75.227 port 60326 ssh2 May 1 01:10:44 pan sshd[723342]: Received disconnect from 59.36.75.227 port 60326:11: Bye Bye [preauth] May 1 01:10:44 pan sshd[723342]: Disconnected from invalid user user 59.36.75.227 port 60326 [preauth] May 1 01:10:59 pan sshd[723356]: Invalid user ubuntu from 59.36.75.227 port 35352 May 1 01:10:59 pan sshd[723356]: pam_unix(sshd:auth): check pass; user unknown May 1 01:10:59 pan sshd[723356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.75.227 May 1 01:11:00 pan sshd[723356]: Failed password for invalid user ubuntu from 59.36.75.227 port 35352 ssh2 May 1 01:11:01 pan systemd[723370]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:11:02 pan sshd[723356]: Received disconnect from 59.36.75.227 port 35352:11: Bye Bye [preauth] May 1 01:11:02 pan sshd[723356]: Disconnected from invalid user ubuntu 59.36.75.227 port 35352 [preauth] May 1 01:12:01 pan systemd[723494]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:13:01 pan systemd[723630]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:14:01 pan systemd[723865]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:14:01 pan systemd[723870]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:14:57 pan sshd[723971]: Connection closed by 106.12.161.149 port 34912 [preauth] May 1 01:15:01 pan systemd[724054]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:15:01 pan systemd[724073]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:15:01 pan systemd[724078]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:16:02 pan systemd[724876]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:17:01 pan systemd[724991]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:18:01 pan systemd[725122]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:18:04 pan sshd[725021]: Connection closed by 106.12.161.149 port 37754 [preauth] May 1 01:19:01 pan systemd[725434]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:19:12 pan sshd[725463]: error: kex_exchange_identification: Connection closed by remote host May 1 01:19:28 pan sshd[725478]: Connection closed by 106.12.161.149 port 33892 [preauth] May 1 01:20:01 pan systemd[725593]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:20:01 pan systemd[725601]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:20:01 pan systemd[725616]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:21:01 pan systemd[726402]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:21:51 pan sshd[726384]: Connection closed by 106.12.161.149 port 35978 [preauth] May 1 01:21:51 pan sshd[726464]: Connection closed by 106.12.161.149 port 51476 [preauth] May 1 01:21:57 pan unix_chkpwd[726507]: password check failed for user (root) May 1 01:21:57 pan sshd[726502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.161.149 user=root May 1 01:21:59 pan sshd[726502]: Failed password for root from 106.12.161.149 port 38192 ssh2 May 1 01:22:00 pan sshd[726502]: Received disconnect from 106.12.161.149 port 38192:11: Bye Bye [preauth] May 1 01:22:00 pan sshd[726502]: Disconnected from authenticating user root 106.12.161.149 port 38192 [preauth] May 1 01:22:01 pan systemd[726521]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:22:27 pan unix_chkpwd[726801]: password check failed for user (root) May 1 01:22:27 pan sshd[726799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.161.149 user=root May 1 01:22:29 pan sshd[726799]: Failed password for root from 106.12.161.149 port 51068 ssh2 May 1 01:23:01 pan systemd[726877]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:24:01 pan systemd[727156]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:25:01 pan systemd[727320]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:25:01 pan systemd[727333]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:25:01 pan systemd[727340]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:26:01 pan systemd[728113]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:27:01 pan systemd[728239]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:27:01 pan sshd[728253]: Invalid user gialauyacht from 213.209.159.231 port 47962 May 1 01:27:01 pan sshd[728253]: pam_unix(sshd:auth): check pass; user unknown May 1 01:27:01 pan sshd[728253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.231 May 1 01:27:04 pan sshd[728253]: Failed password for invalid user gialauyacht from 213.209.159.231 port 47962 ssh2 May 1 01:27:05 pan sshd[728253]: Connection closed by invalid user gialauyacht 213.209.159.231 port 47962 [preauth] May 1 01:28:01 pan systemd[728345]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:29:01 pan systemd[728595]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:29:01 pan systemd[728600]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:30:01 pan systemd[728784]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:30:01 pan systemd[728799]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:30:01 pan systemd[728804]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:31:01 pan systemd[729584]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:32:01 pan systemd[729688]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:33:01 pan systemd[729806]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:33:18 pan sshd[729865]: Invalid user ubuntu from 14.116.172.24 port 24154 May 1 01:33:19 pan sshd[729865]: pam_unix(sshd:auth): check pass; user unknown May 1 01:33:19 pan sshd[729865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.172.24 May 1 01:33:21 pan sshd[729865]: Failed password for invalid user ubuntu from 14.116.172.24 port 24154 ssh2 May 1 01:33:22 pan sshd[729865]: Connection closed by invalid user ubuntu 14.116.172.24 port 24154 [preauth] May 1 01:34:01 pan systemd[730057]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:35:01 pan systemd[730235]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:35:01 pan systemd[730248]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:35:01 pan systemd[730254]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:35:29 pan sshd[731004]: Invalid user pensaunpo from 213.209.159.231 port 50416 May 1 01:35:29 pan sshd[731004]: pam_unix(sshd:auth): check pass; user unknown May 1 01:35:29 pan sshd[731004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.231 May 1 01:35:31 pan sshd[731004]: Failed password for invalid user pensaunpo from 213.209.159.231 port 50416 ssh2 May 1 01:35:31 pan sshd[731004]: Connection closed by invalid user pensaunpo 213.209.159.231 port 50416 [preauth] May 1 01:36:01 pan systemd[731043]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:37:01 pan systemd[731150]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:38:01 pan systemd[731469]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:39:01 pan systemd[731724]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:39:01 pan systemd[731729]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:40:01 pan systemd[731905]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:40:01 pan systemd[731921]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:40:01 pan systemd[731928]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:41:01 pan systemd[732747]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:42:01 pan systemd[732831]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:42:45 pan sshd[732920]: error: kex_exchange_identification: Connection closed by remote host May 1 01:42:48 pan unix_chkpwd[732925]: password check failed for user (root) May 1 01:42:48 pan sshd[732921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.200.56 user=root May 1 01:42:50 pan sshd[732921]: Failed password for root from 101.96.200.56 port 39384 ssh2 May 1 01:42:51 pan sshd[732921]: Connection closed by authenticating user root 101.96.200.56 port 39384 [preauth] May 1 01:43:01 pan systemd[732950]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:43:07 pan sshd[732974]: Invalid user ubuntu from 221.228.203.3 port 40762 May 1 01:43:07 pan sshd[732974]: pam_unix(sshd:auth): check pass; user unknown May 1 01:43:07 pan sshd[732974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.228.203.3 May 1 01:43:09 pan sshd[732974]: Failed password for invalid user ubuntu from 221.228.203.3 port 40762 ssh2 May 1 01:43:10 pan sshd[732993]: Invalid user gialauyacht from 221.228.203.3 port 40387 May 1 01:43:10 pan sshd[732993]: pam_unix(sshd:auth): check pass; user unknown May 1 01:43:10 pan sshd[732993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.228.203.3 May 1 01:43:11 pan sshd[732974]: Connection closed by invalid user ubuntu 221.228.203.3 port 40762 [preauth] May 1 01:43:12 pan sshd[732993]: Failed password for invalid user gialauyacht from 221.228.203.3 port 40387 ssh2 May 1 01:43:14 pan sshd[732993]: Connection closed by invalid user gialauyacht 221.228.203.3 port 40387 [preauth] May 1 01:43:18 pan sshd[733006]: error: kex_exchange_identification: Connection closed by remote host May 1 01:44:01 pan systemd[733205]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:44:01 pan systemd[733210]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:44:44 pan sshd[733288]: error: kex_exchange_identification: Connection closed by remote host May 1 01:45:01 pan systemd[733378]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:45:01 pan systemd[733391]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:45:01 pan systemd[733401]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:45:13 pan unix_chkpwd[734111]: password check failed for user (root) May 1 01:45:13 pan sshd[733280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.39.177 user=root May 1 01:45:15 pan sshd[733280]: Failed password for root from 43.226.39.177 port 43700 ssh2 May 1 01:45:15 pan sshd[733280]: Connection closed by authenticating user root 43.226.39.177 port 43700 [preauth] May 1 01:46:01 pan systemd[734182]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:47:01 pan systemd[734279]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:47:30 pan sshd[734341]: Invalid user nginx from 43.226.39.177 port 55056 May 1 01:47:30 pan sshd[734341]: pam_unix(sshd:auth): check pass; user unknown May 1 01:47:30 pan sshd[734341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.39.177 May 1 01:47:33 pan sshd[734341]: Failed password for invalid user nginx from 43.226.39.177 port 55056 ssh2 May 1 01:47:33 pan sshd[734341]: Connection closed by invalid user nginx 43.226.39.177 port 55056 [preauth] May 1 01:47:49 pan sudo[734396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 01:47:49 pan systemd[734400]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:47:49 pan sudo[734396]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:49 pan sudo[734396]: pam_unix(sudo:session): session closed for user root May 1 01:47:49 pan sudo[734411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 01:47:49 pan sudo[734411]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:49 pan sudo[734411]: pam_unix(sudo:session): session closed for user root May 1 01:47:49 pan sudo[734415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 01:47:49 pan sudo[734415]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:49 pan sudo[734415]: pam_unix(sudo:session): session closed for user root May 1 01:47:49 pan sudo[734419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 01:47:49 pan sudo[734419]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:49 pan sudo[734419]: pam_unix(sudo:session): session closed for user root May 1 01:47:49 pan sudo[734423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 01:47:49 pan sudo[734423]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:49 pan sudo[734423]: pam_unix(sudo:session): session closed for user root May 1 01:47:49 pan sudo[734427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 01:47:49 pan sudo[734427]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:49 pan sudo[734427]: pam_unix(sudo:session): session closed for user root May 1 01:47:50 pan sudo[734435]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 01:47:50 pan sudo[734435]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:50 pan sudo[734435]: pam_unix(sudo:session): session closed for user root May 1 01:47:50 pan sudo[734440]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 01:47:50 pan sudo[734440]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:50 pan sudo[734440]: pam_unix(sudo:session): session closed for user root May 1 01:47:50 pan sudo[734447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 01:47:50 pan sudo[734447]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:50 pan sudo[734447]: pam_unix(sudo:session): session closed for user root May 1 01:47:50 pan sudo[734452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 01:47:50 pan sudo[734452]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:50 pan sudo[734452]: pam_unix(sudo:session): session closed for user root May 1 01:47:51 pan sudo[734456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PjOJAHIYcyaC3zVj.~ May 1 01:47:51 pan sudo[734456]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:51 pan sudo[734456]: pam_unix(sudo:session): session closed for user root May 1 01:47:51 pan sudo[734460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PjOJAHIYcyaC3zVj.~\'' May 1 01:47:51 pan sudo[734460]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:51 pan sudo[734460]: pam_unix(sudo:session): session closed for user root May 1 01:47:51 pan sudo[734465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PjOJAHIYcyaC3zVj.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 01:47:51 pan sudo[734465]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:51 pan sudo[734465]: pam_unix(sudo:session): session closed for user root May 1 01:47:51 pan sudo[734469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 01:47:51 pan sudo[734469]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:51 pan sudo[734469]: pam_unix(sudo:session): session closed for user root May 1 01:47:51 pan sudo[734475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 01:47:51 pan sudo[734475]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:51 pan sudo[734475]: pam_unix(sudo:session): session closed for user root May 1 01:47:51 pan sudo[734480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 01:47:51 pan sudo[734480]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:51 pan sudo[734480]: pam_unix(sudo:session): session closed for user root May 1 01:47:51 pan sudo[734694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 01:47:51 pan sudo[734694]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 01:47:51 pan sudo[734694]: pam_unix(sudo:session): session closed for user root May 1 01:48:01 pan systemd[734732]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:48:53 pan sshd[734986]: Invalid user test from 43.226.39.177 port 33740 May 1 01:49:01 pan systemd[735042]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:49:01 pan sshd[735024]: error: kex_exchange_identification: read: Connection reset by peer May 1 01:49:03 pan sshd[735025]: error: kex_exchange_identification: read: Connection reset by peer May 1 01:50:01 pan systemd[735205]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:50:02 pan systemd[735217]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:50:02 pan systemd[735228]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:51:00 pan sshd[735987]: error: kex_exchange_identification: Connection closed by remote host May 1 01:51:01 pan systemd[736004]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:52:01 pan systemd[736104]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:52:17 pan sshd[736383]: error: kex_exchange_identification: Connection closed by remote host May 1 01:53:01 pan systemd[736440]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:54:01 pan systemd[736719]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:55:01 pan systemd[736876]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:55:01 pan systemd[736886]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:55:01 pan systemd[736899]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 01:56:01 pan systemd[737826]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:57:01 pan systemd[737917]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:57:46 pan sshd[737992]: error: kex_exchange_identification: Connection closed by remote host May 1 01:58:01 pan systemd[738027]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 01:59:01 pan systemd[738285]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 01:59:01 pan systemd[738290]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:00:01 pan systemd[738454]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:00:01 pan systemd[738465]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:00:01 pan systemd[738477]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:01:01 pan systemd[739312]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:02:01 pan systemd[739414]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:03:01 pan systemd[739506]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:04:01 pan systemd[739780]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:04:01 pan systemd[739785]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:05:01 pan systemd[739945]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:05:01 pan systemd[739959]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:05:01 pan systemd[739965]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:06:01 pan systemd[740748]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:07:01 pan systemd[740907]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:07:02 pan sshd[740953]: error: kex_exchange_identification: Connection closed by remote host May 1 02:08:01 pan systemd[741241]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:09:01 pan systemd[741397]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:09:01 pan systemd[741402]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:10:01 pan systemd[741700]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:10:01 pan systemd[741714]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:10:01 pan systemd[741723]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:11:01 pan systemd[742516]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:12:01 pan systemd[742622]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:12:01 pan systemd[742627]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:13:01 pan systemd[742780]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:14:02 pan systemd[742926]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:14:50 pan sshd[743012]: Invalid user pensaunpo from 213.209.159.227 port 41816 May 1 02:14:50 pan sshd[743012]: pam_unix(sshd:auth): check pass; user unknown May 1 02:14:50 pan sshd[743012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.227 May 1 02:14:52 pan sshd[743012]: Failed password for invalid user pensaunpo from 213.209.159.227 port 41816 ssh2 May 1 02:14:53 pan sshd[743012]: Connection closed by invalid user pensaunpo 213.209.159.227 port 41816 [preauth] May 1 02:15:01 pan systemd[743220]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:15:01 pan systemd[743242]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:16:01 pan systemd[744008]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:17:01 pan systemd[744124]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:17:25 pan sshd[744193]: error: kex_exchange_identification: Connection closed by remote host May 1 02:18:01 pan systemd[744246]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:18:12 pan systemd[744249]: pam_unix(systemd-user:session): session closed for user bangherangstudio May 1 02:18:18 pan sshd[744298]: error: kex_exchange_identification: banner line contains invalid characters May 1 02:19:01 pan systemd[744379]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:20:01 pan systemd[744538]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:20:01 pan systemd[744551]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:21:01 pan systemd[745475]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:22:01 pan systemd[745570]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:23:01 pan systemd[745893]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:24:01 pan systemd[746326]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:25:01 pan systemd[746480]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:25:01 pan systemd[746490]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:25:01 pan systemd[746501]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:26:01 pan systemd[747268]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:27:01 pan systemd[747510]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:28:01 pan systemd[747604]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:29:01 pan systemd[747722]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:29:01 pan systemd[747727]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:30:01 pan systemd[747898]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:30:01 pan systemd[747909]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:30:01 pan systemd[747921]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:30:57 pan sshd[748687]: Invalid user pensaunpo from 213.209.159.225 port 51112 May 1 02:30:57 pan sshd[748687]: pam_unix(sshd:auth): check pass; user unknown May 1 02:30:57 pan sshd[748687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.225 May 1 02:30:59 pan sshd[748687]: Failed password for invalid user pensaunpo from 213.209.159.225 port 51112 ssh2 May 1 02:31:01 pan sshd[748687]: Connection closed by invalid user pensaunpo 213.209.159.225 port 51112 [preauth] May 1 02:31:01 pan systemd[748706]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:32:01 pan systemd[748934]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:33:01 pan systemd[749025]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:34:01 pan systemd[749138]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:35:02 pan systemd[749305]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:35:02 pan systemd[749319]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:35:02 pan systemd[749326]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:36:01 pan systemd[750110]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:37:01 pan systemd[750391]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:38:01 pan systemd[750727]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:39:01 pan systemd[750856]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:39:01 pan systemd[750861]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:40:01 pan systemd[751023]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:40:01 pan systemd[751034]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:40:01 pan systemd[751044]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:41:01 pan systemd[751823]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:42:01 pan systemd[751936]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:43:01 pan systemd[752168]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:44:01 pan systemd[752299]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:44:01 pan systemd[752304]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:44:11 pan systemd[752303]: pam_unix(systemd-user:session): session closed for user bangherangstudio May 1 02:45:01 pan systemd[752468]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:45:01 pan systemd[752481]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:45:01 pan systemd[752493]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:46:01 pan systemd[753273]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:47:01 pan systemd[753376]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:47:49 pan sudo[753671]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 02:47:49 pan systemd[753675]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:47:49 pan sudo[753671]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:49 pan sudo[753671]: pam_unix(sudo:session): session closed for user root May 1 02:47:49 pan sudo[753686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 02:47:49 pan sudo[753686]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:49 pan sudo[753686]: pam_unix(sudo:session): session closed for user root May 1 02:47:49 pan sudo[753690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 02:47:49 pan sudo[753690]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:49 pan sudo[753690]: pam_unix(sudo:session): session closed for user root May 1 02:47:49 pan sudo[753694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 02:47:49 pan sudo[753694]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:49 pan sudo[753694]: pam_unix(sudo:session): session closed for user root May 1 02:47:49 pan sudo[753698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 02:47:49 pan sudo[753698]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:49 pan sudo[753698]: pam_unix(sudo:session): session closed for user root May 1 02:47:49 pan sudo[753703]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 02:47:49 pan sudo[753703]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:49 pan sudo[753703]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753709]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 02:47:50 pan sudo[753709]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753709]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 02:47:50 pan sudo[753714]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753714]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 02:47:50 pan sudo[753720]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753720]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753725]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 02:47:50 pan sudo[753725]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753725]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753729]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qrvi3VI7mIwSocko.~ May 1 02:47:50 pan sudo[753729]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753729]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753733]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qrvi3VI7mIwSocko.~\'' May 1 02:47:50 pan sudo[753733]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753733]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qrvi3VI7mIwSocko.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 02:47:50 pan sudo[753738]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753738]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 02:47:50 pan sudo[753742]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753742]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 02:47:50 pan sudo[753747]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753747]: pam_unix(sudo:session): session closed for user root May 1 02:47:50 pan sudo[753752]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 02:47:50 pan sudo[753752]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:50 pan sudo[753752]: pam_unix(sudo:session): session closed for user root May 1 02:47:51 pan sudo[753966]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 02:47:51 pan sudo[753966]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 02:47:51 pan sudo[753966]: pam_unix(sudo:session): session closed for user root May 1 02:48:01 pan systemd[754000]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:48:20 pan sshd[754038]: error: kex_exchange_identification: Connection closed by remote host May 1 02:49:01 pan systemd[754116]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:50:01 pan systemd[754271]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:50:01 pan systemd[754272]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:50:01 pan systemd[754290]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:51:01 pan systemd[755060]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:52:01 pan systemd[755164]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:53:01 pan systemd[755629]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:54:02 pan systemd[755755]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:55:01 pan systemd[755923]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:55:01 pan systemd[755938]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 02:55:01 pan systemd[755945]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 02:56:01 pan systemd[756737]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:57:01 pan systemd[756837]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:58:01 pan systemd[757059]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:59:01 pan systemd[757206]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 02:59:01 pan systemd[757211]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:00:01 pan systemd[757392]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:00:01 pan systemd[757406]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:00:01 pan systemd[757412]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:01:01 pan systemd[758202]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:02:01 pan systemd[758317]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:03:01 pan systemd[758419]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:04:01 pan systemd[758742]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:04:01 pan systemd[758746]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:05:01 pan systemd[758914]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:05:01 pan systemd[758928]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:05:01 pan systemd[758935]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:06:01 pan systemd[759738]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:07:01 pan systemd[760068]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:08:01 pan systemd[760405]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:08:29 pan sshd[760599]: Invalid user minecraft from 159.65.144.195 port 39244 May 1 03:08:29 pan sshd[760599]: pam_unix(sshd:auth): check pass; user unknown May 1 03:08:29 pan sshd[760599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.144.195 May 1 03:08:31 pan sshd[760599]: Failed password for invalid user minecraft from 159.65.144.195 port 39244 ssh2 May 1 03:08:32 pan sshd[760599]: Connection closed by invalid user minecraft 159.65.144.195 port 39244 [preauth] May 1 03:08:35 pan sshd[760609]: Invalid user 1 from 159.65.144.195 port 39248 May 1 03:08:35 pan sshd[760609]: pam_unix(sshd:auth): check pass; user unknown May 1 03:08:35 pan sshd[760609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.144.195 May 1 03:08:37 pan sshd[760609]: Failed password for invalid user 1 from 159.65.144.195 port 39248 ssh2 May 1 03:08:37 pan sshd[760609]: Connection closed by invalid user 1 159.65.144.195 port 39248 [preauth] May 1 03:08:45 pan sshd[760620]: Invalid user user1 from 159.65.144.195 port 60442 May 1 03:08:45 pan sshd[760620]: pam_unix(sshd:auth): check pass; user unknown May 1 03:08:45 pan sshd[760620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.144.195 May 1 03:08:47 pan sshd[760620]: Failed password for invalid user user1 from 159.65.144.195 port 60442 ssh2 May 1 03:09:01 pan systemd[760702]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:09:01 pan systemd[760707]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:10:01 pan systemd[760868]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:10:01 pan systemd[760884]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:10:01 pan systemd[760892]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:11:01 pan systemd[761666]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:12:02 pan systemd[761753]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:13:01 pan systemd[761854]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:14:01 pan systemd[762128]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:14:01 pan systemd[762133]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:15:01 pan systemd[762329]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:15:01 pan systemd[762343]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:15:01 pan systemd[762353]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:16:01 pan systemd[763182]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:17:01 pan systemd[763275]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:17:01 pan systemd[763279]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:18:01 pan systemd[764193]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:19:01 pan systemd[764446]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:20:01 pan systemd[764601]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:20:01 pan systemd[764623]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:21:01 pan systemd[765392]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:22:01 pan systemd[765571]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:23:01 pan systemd[766664]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:24:01 pan systemd[766930]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:25:01 pan systemd[767084]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:25:01 pan systemd[767095]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:25:01 pan systemd[767104]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:26:01 pan systemd[767884]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:26:21 pan sshd[767930]: Invalid user gialauyacht from 213.209.159.236 port 48750 May 1 03:26:21 pan sshd[767930]: pam_unix(sshd:auth): check pass; user unknown May 1 03:26:21 pan sshd[767930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.236 May 1 03:26:23 pan sshd[767930]: Failed password for invalid user gialauyacht from 213.209.159.236 port 48750 ssh2 May 1 03:26:24 pan sshd[767930]: Connection closed by invalid user gialauyacht 213.209.159.236 port 48750 [preauth] May 1 03:27:01 pan systemd[768010]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:27:01 pan systemd[768015]: pam_unix(systemd-user:session): session opened for user mailman by (uid=0) May 1 03:28:01 pan systemd[768178]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:29:01 pan systemd[768429]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:29:01 pan systemd[768434]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:30:01 pan systemd[768610]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:30:01 pan systemd[768619]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:30:01 pan systemd[768635]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:31:01 pan systemd[769417]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:31:30 pan sshd[769470]: Invalid user gialauyacht from 213.209.159.225 port 58886 May 1 03:31:30 pan sshd[769470]: pam_unix(sshd:auth): check pass; user unknown May 1 03:31:30 pan sshd[769470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.225 May 1 03:31:32 pan sshd[769470]: Failed password for invalid user gialauyacht from 213.209.159.225 port 58886 ssh2 May 1 03:31:34 pan sshd[769470]: Connection closed by invalid user gialauyacht 213.209.159.225 port 58886 [preauth] May 1 03:32:01 pan systemd[769521]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:33:01 pan systemd[769631]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:34:01 pan systemd[769873]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:35:01 pan systemd[770024]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:35:01 pan systemd[770039]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:35:01 pan systemd[770046]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:36:01 pan systemd[770908]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:37:01 pan systemd[771011]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:38:01 pan systemd[771347]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:38:05 pan unix_chkpwd[771369]: password check failed for user (root) May 1 03:38:05 pan sshd[771367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.235 user=root May 1 03:38:07 pan sshd[771367]: Failed password for root from 213.209.159.235 port 32896 ssh2 May 1 03:38:07 pan sshd[771367]: Connection closed by authenticating user root 213.209.159.235 port 32896 [preauth] May 1 03:38:46 pan sshd[771420]: Invalid user test from 87.121.84.136 port 43100 May 1 03:38:46 pan sshd[771420]: pam_unix(sshd:auth): check pass; user unknown May 1 03:38:46 pan sshd[771420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.121.84.136 May 1 03:38:48 pan sshd[771420]: Failed password for invalid user test from 87.121.84.136 port 43100 ssh2 May 1 03:38:49 pan sshd[771420]: Connection closed by invalid user test 87.121.84.136 port 43100 [preauth] May 1 03:39:01 pan systemd[771590]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:39:01 pan systemd[771595]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:40:01 pan systemd[771769]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:40:01 pan systemd[771780]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:40:01 pan systemd[771791]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:41:01 pan sshd[772560]: error: kex_exchange_identification: banner line contains invalid characters May 1 03:41:01 pan sshd[772561]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" May 1 03:41:01 pan systemd[772573]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:42:01 pan systemd[772675]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:43:01 pan systemd[772771]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:44:01 pan systemd[773039]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:44:01 pan systemd[773044]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:45:01 pan systemd[773214]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:45:01 pan systemd[773227]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:45:01 pan systemd[773236]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:46:01 pan systemd[774021]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:47:01 pan systemd[774123]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:47:48 pan sudo[774201]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 03:47:48 pan systemd[774205]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:47:48 pan sudo[774201]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:48 pan sudo[774201]: pam_unix(sudo:session): session closed for user root May 1 03:47:48 pan sudo[774217]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 03:47:48 pan sudo[774217]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:48 pan sudo[774217]: pam_unix(sudo:session): session closed for user root May 1 03:47:48 pan sudo[774221]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 03:47:48 pan sudo[774221]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:48 pan sudo[774221]: pam_unix(sudo:session): session closed for user root May 1 03:47:48 pan sudo[774225]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 03:47:48 pan sudo[774225]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:48 pan sudo[774225]: pam_unix(sudo:session): session closed for user root May 1 03:47:48 pan sudo[774229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 03:47:48 pan sudo[774229]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:48 pan sudo[774229]: pam_unix(sudo:session): session closed for user root May 1 03:47:48 pan sudo[774233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 03:47:48 pan sudo[774233]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:48 pan sudo[774233]: pam_unix(sudo:session): session closed for user root May 1 03:47:49 pan sudo[774240]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 03:47:49 pan sudo[774240]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:49 pan sudo[774240]: pam_unix(sudo:session): session closed for user root May 1 03:47:49 pan sudo[774245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 03:47:49 pan sudo[774245]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:49 pan sudo[774245]: pam_unix(sudo:session): session closed for user root May 1 03:47:49 pan sudo[774251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 03:47:49 pan sudo[774251]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:49 pan sudo[774251]: pam_unix(sudo:session): session closed for user root May 1 03:47:49 pan sudo[774256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 03:47:49 pan sudo[774256]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:49 pan sudo[774256]: pam_unix(sudo:session): session closed for user root May 1 03:47:49 pan sudo[774260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Veei8EidDndGGOdm.~ May 1 03:47:49 pan sudo[774260]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:49 pan sudo[774260]: pam_unix(sudo:session): session closed for user root May 1 03:47:49 pan sudo[774264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Veei8EidDndGGOdm.~\'' May 1 03:47:49 pan sudo[774264]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:49 pan sudo[774264]: pam_unix(sudo:session): session closed for user root May 1 03:47:49 pan sudo[774269]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Veei8EidDndGGOdm.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 03:47:49 pan sudo[774269]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:49 pan sudo[774269]: pam_unix(sudo:session): session closed for user root May 1 03:47:49 pan sudo[774273]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 03:47:49 pan sudo[774273]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:49 pan sudo[774273]: pam_unix(sudo:session): session closed for user root May 1 03:47:50 pan sudo[774281]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 03:47:50 pan sudo[774281]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:50 pan sudo[774281]: pam_unix(sudo:session): session closed for user root May 1 03:47:50 pan sudo[774286]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 03:47:50 pan sudo[774286]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:50 pan sudo[774286]: pam_unix(sudo:session): session closed for user root May 1 03:47:50 pan sudo[774487]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 03:47:50 pan sudo[774487]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 03:47:50 pan sudo[774487]: pam_unix(sudo:session): session closed for user root May 1 03:48:01 pan systemd[774532]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:48:12 pan sshd[774582]: Invalid user pensaunpo from 213.209.159.226 port 42234 May 1 03:48:12 pan sshd[774582]: pam_unix(sshd:auth): check pass; user unknown May 1 03:48:12 pan sshd[774582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.226 May 1 03:48:14 pan sshd[774582]: Failed password for invalid user pensaunpo from 213.209.159.226 port 42234 ssh2 May 1 03:48:15 pan sshd[774582]: Connection closed by invalid user pensaunpo 213.209.159.226 port 42234 [preauth] May 1 03:49:01 pan systemd[774805]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:50:01 pan systemd[775269]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:50:01 pan systemd[775281]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:50:01 pan systemd[775289]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:50:15 pan sshd[775996]: error: kex_exchange_identification: Connection closed by remote host May 1 03:50:22 pan unix_chkpwd[776024]: password check failed for user (root) May 1 03:50:22 pan sshd[776007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.190.105.98 user=root May 1 03:50:24 pan sshd[776007]: Failed password for root from 222.190.105.98 port 60998 ssh2 May 1 03:50:26 pan sshd[776007]: Connection closed by authenticating user root 222.190.105.98 port 60998 [preauth] May 1 03:51:01 pan systemd[776073]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:52:01 pan systemd[776170]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:53:01 pan systemd[776499]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:54:01 pan systemd[776678]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:55:01 pan systemd[777297]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:55:01 pan systemd[777311]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 03:55:01 pan systemd[777318]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 03:55:19 pan sshd[778062]: Invalid user admin from 180.93.172.213 port 40472 May 1 03:55:19 pan sshd[778062]: pam_unix(sshd:auth): check pass; user unknown May 1 03:55:19 pan sshd[778062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.93.172.213 May 1 03:55:21 pan sshd[778062]: Failed password for invalid user admin from 180.93.172.213 port 40472 ssh2 May 1 03:55:22 pan sshd[778062]: Received disconnect from 180.93.172.213 port 40472:11: Bye Bye [preauth] May 1 03:55:22 pan sshd[778062]: Disconnected from invalid user admin 180.93.172.213 port 40472 [preauth] May 1 03:56:01 pan systemd[778435]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:57:01 pan systemd[778559]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:58:01 pan systemd[778655]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:59:01 pan systemd[778817]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 03:59:01 pan systemd[778822]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:00:01 pan systemd[779136]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:00:01 pan systemd[779146]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:00:01 pan systemd[779160]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:00:06 pan sshd[779776]: Invalid user postgres from 45.43.86.48 port 36088 May 1 04:00:06 pan sshd[779776]: pam_unix(sshd:auth): check pass; user unknown May 1 04:00:06 pan sshd[779776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.43.86.48 May 1 04:00:07 pan sshd[779776]: Failed password for invalid user postgres from 45.43.86.48 port 36088 ssh2 May 1 04:00:09 pan sshd[779776]: Received disconnect from 45.43.86.48 port 36088:11: Bye Bye [preauth] May 1 04:00:09 pan sshd[779776]: Disconnected from invalid user postgres 45.43.86.48 port 36088 [preauth] May 1 04:01:01 pan systemd[780019]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:01:47 pan sshd[780101]: Invalid user ubuntu from 45.43.86.48 port 33520 May 1 04:01:47 pan sshd[780101]: pam_unix(sshd:auth): check pass; user unknown May 1 04:01:47 pan sshd[780101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.43.86.48 May 1 04:01:49 pan sshd[780105]: Invalid user gialauyacht from 213.209.159.227 port 36538 May 1 04:01:49 pan sshd[780105]: pam_unix(sshd:auth): check pass; user unknown May 1 04:01:49 pan sshd[780105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.227 May 1 04:01:49 pan sshd[780101]: Failed password for invalid user ubuntu from 45.43.86.48 port 33520 ssh2 May 1 04:01:50 pan sshd[780105]: Failed password for invalid user gialauyacht from 213.209.159.227 port 36538 ssh2 May 1 04:01:51 pan sshd[780101]: Received disconnect from 45.43.86.48 port 33520:11: Bye Bye [preauth] May 1 04:01:51 pan sshd[780101]: Disconnected from invalid user ubuntu 45.43.86.48 port 33520 [preauth] May 1 04:01:51 pan sshd[780105]: Connection closed by invalid user gialauyacht 213.209.159.227 port 36538 [preauth] May 1 04:02:01 pan systemd[780123]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:02:18 pan sshd[780164]: Invalid user ubuntu from 118.145.213.116 port 51814 May 1 04:02:18 pan sshd[780164]: pam_unix(sshd:auth): check pass; user unknown May 1 04:02:18 pan sshd[780164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.213.116 May 1 04:02:20 pan sshd[780164]: Failed password for invalid user ubuntu from 118.145.213.116 port 51814 ssh2 May 1 04:02:21 pan sshd[780164]: Received disconnect from 118.145.213.116 port 51814:11: Bye Bye [preauth] May 1 04:02:21 pan sshd[780164]: Disconnected from invalid user ubuntu 118.145.213.116 port 51814 [preauth] May 1 04:02:35 pan sshd[780176]: Invalid user teamspeak3 from 45.43.86.48 port 50486 May 1 04:02:35 pan sshd[780176]: pam_unix(sshd:auth): check pass; user unknown May 1 04:02:35 pan sshd[780176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.43.86.48 May 1 04:02:37 pan sshd[780176]: Failed password for invalid user teamspeak3 from 45.43.86.48 port 50486 ssh2 May 1 04:02:39 pan sshd[780176]: Received disconnect from 45.43.86.48 port 50486:11: Bye Bye [preauth] May 1 04:02:39 pan sshd[780176]: Disconnected from invalid user teamspeak3 45.43.86.48 port 50486 [preauth] May 1 04:03:01 pan systemd[780239]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:04:01 pan systemd[780354]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:04:01 pan systemd[780359]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:04:49 pan sshd[780581]: error: kex_exchange_identification: read: Connection reset by peer May 1 04:05:01 pan systemd[780660]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:05:01 pan systemd[780672]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:05:01 pan systemd[780680]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:06:01 pan systemd[781460]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:06:04 pan sshd[781442]: Connection closed by 118.145.213.116 port 50938 [preauth] May 1 04:06:51 pan sshd[781563]: Invalid user gialauyacht from 213.209.159.226 port 38688 May 1 04:06:51 pan sshd[781563]: pam_unix(sshd:auth): check pass; user unknown May 1 04:06:51 pan sshd[781563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.226 May 1 04:06:53 pan sshd[781563]: Failed password for invalid user gialauyacht from 213.209.159.226 port 38688 ssh2 May 1 04:06:55 pan sshd[781563]: Connection closed by invalid user gialauyacht 213.209.159.226 port 38688 [preauth] May 1 04:07:01 pan systemd[781583]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:07:45 pan sshd[781872]: Invalid user scpuser from 118.145.213.116 port 59562 May 1 04:07:45 pan sshd[781872]: pam_unix(sshd:auth): check pass; user unknown May 1 04:07:45 pan sshd[781872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.213.116 May 1 04:07:48 pan sshd[781872]: Failed password for invalid user scpuser from 118.145.213.116 port 59562 ssh2 May 1 04:07:49 pan sshd[781872]: Received disconnect from 118.145.213.116 port 59562:11: Bye Bye [preauth] May 1 04:07:49 pan sshd[781872]: Disconnected from invalid user scpuser 118.145.213.116 port 59562 [preauth] May 1 04:08:01 pan systemd[781904]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:08:08 pan sshd[781926]: error: type 20 seq 2 [preauth] May 1 04:08:08 pan sshd[781926]: error: type 30 seq 3 [preauth] May 1 04:08:08 pan sshd[781926]: error: type 20 seq 4 [preauth] May 1 04:08:08 pan sshd[781926]: error: type 30 seq 5 [preauth] May 1 04:08:10 pan sshd[781926]: error: type 20 seq 6 [preauth] May 1 04:08:10 pan sshd[781926]: error: type 30 seq 7 [preauth] May 1 04:08:36 pan sshd[781926]: Connection reset by 45.192.184.50 port 6103 [preauth] May 1 04:09:01 pan systemd[782031]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:09:01 pan systemd[782036]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:10:01 pan systemd[782335]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:10:01 pan systemd[782352]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:10:01 pan systemd[782361]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:11:02 pan systemd[783214]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:12:01 pan systemd[783304]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:12:29 pan sshd[783361]: error: kex_exchange_identification: Connection closed by remote host May 1 04:13:01 pan systemd[783402]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:14:01 pan systemd[783516]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:14:01 pan systemd[783521]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:15:01 pan systemd[783694]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:15:01 pan systemd[783704]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:15:01 pan systemd[783717]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:16:01 pan systemd[784625]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:16:32 pan sshd[784673]: Connection closed by 118.145.213.116 port 50772 [preauth] May 1 04:16:38 pan sshd[784652]: Connection closed by 89.233.107.97 port 46098 [preauth] May 1 04:17:01 pan systemd[784728]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:17:29 pan sshd[784774]: Invalid user postgres from 118.145.213.116 port 59242 May 1 04:17:29 pan sshd[784774]: pam_unix(sshd:auth): check pass; user unknown May 1 04:17:29 pan sshd[784774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.213.116 May 1 04:17:31 pan sshd[784774]: Failed password for invalid user postgres from 118.145.213.116 port 59242 ssh2 May 1 04:17:32 pan sshd[784782]: Invalid user admin from 87.121.84.136 port 36342 May 1 04:17:32 pan sshd[784782]: pam_unix(sshd:auth): check pass; user unknown May 1 04:17:32 pan sshd[784782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.121.84.136 May 1 04:17:32 pan sshd[784774]: Received disconnect from 118.145.213.116 port 59242:11: Bye Bye [preauth] May 1 04:17:32 pan sshd[784774]: Disconnected from invalid user postgres 118.145.213.116 port 59242 [preauth] May 1 04:17:34 pan sshd[784782]: Failed password for invalid user admin from 87.121.84.136 port 36342 ssh2 May 1 04:17:35 pan sshd[784782]: Connection closed by invalid user admin 87.121.84.136 port 36342 [preauth] May 1 04:18:00 pan sshd[784837]: error: kex_exchange_identification: Connection closed by remote host May 1 04:18:01 pan systemd[784849]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:19:01 pan systemd[784982]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:20:01 pan systemd[785126]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:20:01 pan systemd[785141]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:20:01 pan systemd[785148]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:21:01 pan systemd[786055]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:22:01 pan systemd[786155]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:23:01 pan systemd[786466]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:24:01 pan systemd[786599]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:24:01 pan sshd[786622]: error: kex_exchange_identification: Connection closed by remote host May 1 04:25:01 pan systemd[786766]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:25:01 pan systemd[786782]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:25:01 pan systemd[786787]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:25:03 pan sshd[786664]: error: kex_exchange_identification: read: Connection reset by peer May 1 04:26:01 pan systemd[787564]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:27:01 pan systemd[788036]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:28:01 pan systemd[788127]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:29:01 pan systemd[788254]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:29:01 pan systemd[788259]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:30:01 pan systemd[788464]: pam_unix(systemd-user:session): session opened for user mailman by (uid=0) May 1 04:30:01 pan systemd[788477]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:30:01 pan systemd[788488]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:30:01 pan systemd[788494]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:31:01 pan systemd[789290]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:31:56 pan sshd[789572]: Connection closed by 141.11.21.145 port 40800 [preauth] May 1 04:32:01 pan systemd[789593]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:33:01 pan systemd[789679]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:34:01 pan systemd[789798]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:35:01 pan systemd[789957]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:35:01 pan systemd[789972]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:35:02 pan systemd[789981]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:36:01 pan systemd[790772]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:37:01 pan systemd[791030]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:38:01 pan systemd[791350]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:38:26 pan sshd[791400]: Invalid user pensaunpo from 213.209.159.228 port 56234 May 1 04:38:26 pan sshd[791400]: pam_unix(sshd:auth): check pass; user unknown May 1 04:38:26 pan sshd[791400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.228 May 1 04:38:28 pan sshd[791400]: Failed password for invalid user pensaunpo from 213.209.159.228 port 56234 ssh2 May 1 04:38:29 pan sshd[791400]: Connection closed by invalid user pensaunpo 213.209.159.228 port 56234 [preauth] May 1 04:39:01 pan systemd[791477]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:39:01 pan systemd[791482]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:40:01 pan systemd[791715]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:40:01 pan systemd[791727]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:40:01 pan systemd[791738]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:41:01 pan systemd[792518]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:42:01 pan systemd[792746]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:43:01 pan systemd[792842]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:43:54 pan unix_chkpwd[792942]: password check failed for user (root) May 1 04:43:54 pan sshd[792938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.246.241.87 user=root May 1 04:43:55 pan sshd[792938]: Failed password for root from 114.246.241.87 port 33806 ssh2 May 1 04:43:56 pan sshd[792938]: Connection closed by authenticating user root 114.246.241.87 port 33806 [preauth] May 1 04:44:01 pan systemd[792973]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:44:01 pan systemd[792977]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:45:01 pan systemd[793140]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:45:01 pan systemd[793155]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:45:01 pan systemd[793164]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:46:01 pan systemd[793936]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:47:01 pan systemd[794168]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:47:48 pan sudo[794418]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 04:47:48 pan systemd[794422]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:47:48 pan sudo[794418]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:48 pan sudo[794418]: pam_unix(sudo:session): session closed for user root May 1 04:47:48 pan sudo[794433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 04:47:48 pan sudo[794433]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:48 pan sudo[794433]: pam_unix(sudo:session): session closed for user root May 1 04:47:48 pan sudo[794437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 04:47:48 pan sudo[794437]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:48 pan sudo[794437]: pam_unix(sudo:session): session closed for user root May 1 04:47:48 pan sudo[794442]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 04:47:48 pan sudo[794442]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:48 pan sudo[794442]: pam_unix(sudo:session): session closed for user root May 1 04:47:48 pan sudo[794446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 04:47:48 pan sudo[794446]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:48 pan sudo[794446]: pam_unix(sudo:session): session closed for user root May 1 04:47:48 pan sudo[794451]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 04:47:48 pan sudo[794451]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:48 pan sudo[794451]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794459]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 04:47:49 pan sudo[794459]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794459]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 04:47:49 pan sudo[794465]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794465]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794471]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 04:47:49 pan sudo[794471]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794471]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794477]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 04:47:49 pan sudo[794477]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794477]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794481]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qLZItHOdkdsP62tl.~ May 1 04:47:49 pan sudo[794481]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794481]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794485]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qLZItHOdkdsP62tl.~\'' May 1 04:47:49 pan sudo[794485]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794485]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qLZItHOdkdsP62tl.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 04:47:49 pan sudo[794490]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794490]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 04:47:49 pan sudo[794494]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794494]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 04:47:49 pan sudo[794500]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794500]: pam_unix(sudo:session): session closed for user root May 1 04:47:49 pan sudo[794505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 04:47:49 pan sudo[794505]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:49 pan sudo[794505]: pam_unix(sudo:session): session closed for user root May 1 04:47:50 pan sudo[794722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 04:47:50 pan sudo[794722]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 04:47:50 pan sudo[794722]: pam_unix(sudo:session): session closed for user root May 1 04:48:01 pan systemd[794802]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:49:01 pan systemd[794934]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:50:01 pan systemd[795084]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:50:01 pan systemd[795099]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:50:01 pan systemd[795106]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:51:01 pan systemd[795883]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:52:01 pan systemd[796084]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:53:01 pan systemd[796418]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:54:01 pan systemd[796548]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:55:01 pan systemd[796827]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:55:01 pan systemd[796841]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 04:55:01 pan systemd[796850]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:56:01 pan systemd[797631]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:57:01 pan systemd[797724]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:58:01 pan systemd[797942]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 04:59:01 pan systemd[798073]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 04:59:01 pan systemd[798078]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:00:01 pan systemd[798260]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:00:01 pan systemd[798275]: pam_unix(systemd-user:session): session opened for user mailman by (uid=0) May 1 05:00:01 pan systemd[798284]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:00:01 pan systemd[798289]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:01:01 pan systemd[799194]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:02:01 pan systemd[799290]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:03:01 pan systemd[799557]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:04:01 pan systemd[799822]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:04:01 pan systemd[799826]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:05:01 pan systemd[800247]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:05:01 pan systemd[800260]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:05:01 pan systemd[800268]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:06:01 pan systemd[801075]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:07:01 pan systemd[801230]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:08:01 pan systemd[801587]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:09:01 pan systemd[801848]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:09:01 pan systemd[801853]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:10:01 pan systemd[802012]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:10:01 pan systemd[802027]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:10:01 pan systemd[802038]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:10:58 pan sshd[802790]: Invalid user pensaunpo from 213.209.159.235 port 33234 May 1 05:10:58 pan sshd[802790]: pam_unix(sshd:auth): check pass; user unknown May 1 05:10:58 pan sshd[802790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.235 May 1 05:10:59 pan sshd[802790]: Failed password for invalid user pensaunpo from 213.209.159.235 port 33234 ssh2 May 1 05:11:01 pan systemd[802805]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:11:01 pan sshd[802790]: Connection closed by invalid user pensaunpo 213.209.159.235 port 33234 [preauth] May 1 05:12:01 pan systemd[802898]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:13:01 pan systemd[803008]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:14:01 pan systemd[803286]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:14:01 pan systemd[803291]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:15:01 pan systemd[803487]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:15:01 pan systemd[803496]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:15:01 pan systemd[803508]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:16:01 pan systemd[804308]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:17:01 pan systemd[804397]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:18:01 pan systemd[804499]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:19:01 pan systemd[804764]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:20:01 pan systemd[804926]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:20:01 pan systemd[804940]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:20:01 pan systemd[804946]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:21:01 pan systemd[805722]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:22:01 pan systemd[805912]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:23:01 pan systemd[806237]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:24:01 pan systemd[806486]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:25:01 pan systemd[806631]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:25:01 pan systemd[806641]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:25:01 pan systemd[806651]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:26:01 pan systemd[807420]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:27:02 pan systemd[807533]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:28:01 pan systemd[807632]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:28:36 pan sshd[807824]: error: kex_exchange_identification: read: Connection reset by peer May 1 05:29:01 pan systemd[807884]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:29:01 pan systemd[807889]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:29:55 pan sshd[808002]: error: kex_exchange_identification: Connection closed by remote host May 1 05:30:01 pan systemd[808081]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:30:01 pan systemd[808095]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:30:01 pan systemd[808102]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:31:01 pan systemd[808886]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:32:01 pan systemd[808994]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:33:01 pan systemd[809086]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:34:01 pan systemd[809327]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:35:01 pan systemd[809466]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:35:01 pan systemd[809481]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:35:01 pan systemd[809486]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:35:54 pan sshd[810289]: error: kex_exchange_identification: banner line contains invalid characters May 1 05:36:01 pan systemd[810304]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:37:01 pan systemd[810395]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:38:01 pan systemd[810781]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:39:01 pan systemd[811032]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:39:01 pan systemd[811037]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:39:51 pan sshd[811381]: Invalid user gialauyacht from 213.209.159.228 port 33348 May 1 05:39:51 pan sshd[811381]: pam_unix(sshd:auth): check pass; user unknown May 1 05:39:51 pan sshd[811381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.228 May 1 05:39:53 pan sshd[811381]: Failed password for invalid user gialauyacht from 213.209.159.228 port 33348 ssh2 May 1 05:39:55 pan sshd[811381]: Connection closed by invalid user gialauyacht 213.209.159.228 port 33348 [preauth] May 1 05:40:01 pan systemd[811786]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:40:01 pan systemd[811800]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:40:01 pan systemd[811810]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:41:01 pan systemd[813355]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:42:01 pan systemd[813689]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:43:01 pan systemd[813787]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:43:49 pan sshd[813986]: Invalid user pensaunpo from 213.209.159.236 port 37672 May 1 05:43:49 pan sshd[813986]: pam_unix(sshd:auth): check pass; user unknown May 1 05:43:49 pan sshd[813986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.236 May 1 05:43:50 pan sshd[813986]: Failed password for invalid user pensaunpo from 213.209.159.236 port 37672 ssh2 May 1 05:43:51 pan sshd[813986]: Connection closed by invalid user pensaunpo 213.209.159.236 port 37672 [preauth] May 1 05:44:02 pan systemd[814027]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:44:02 pan systemd[814032]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:45:01 pan systemd[814222]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:45:01 pan systemd[814242]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:45:01 pan systemd[814247]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:46:01 pan systemd[815027]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:47:01 pan systemd[815137]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:47:47 pan sudo[815218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 05:47:47 pan systemd[815222]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:47:47 pan sudo[815218]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:47 pan sudo[815218]: pam_unix(sudo:session): session closed for user root May 1 05:47:47 pan sudo[815233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 05:47:47 pan sudo[815233]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:47 pan sudo[815233]: pam_unix(sudo:session): session closed for user root May 1 05:47:47 pan sudo[815237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 05:47:47 pan sudo[815237]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:47 pan sudo[815237]: pam_unix(sudo:session): session closed for user root May 1 05:47:47 pan sudo[815241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 05:47:47 pan sudo[815241]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:47 pan sudo[815241]: pam_unix(sudo:session): session closed for user root May 1 05:47:47 pan sudo[815245]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 05:47:47 pan sudo[815245]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:47 pan sudo[815245]: pam_unix(sudo:session): session closed for user root May 1 05:47:47 pan sudo[815249]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 05:47:47 pan sudo[815249]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:47 pan sudo[815249]: pam_unix(sudo:session): session closed for user root May 1 05:47:48 pan sudo[815254]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 05:47:48 pan sudo[815254]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:48 pan sudo[815254]: pam_unix(sudo:session): session closed for user root May 1 05:47:48 pan sudo[815260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 05:47:48 pan sudo[815260]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:48 pan sudo[815260]: pam_unix(sudo:session): session closed for user root May 1 05:47:48 pan sudo[815266]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 05:47:48 pan sudo[815266]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:48 pan sudo[815266]: pam_unix(sudo:session): session closed for user root May 1 05:47:48 pan sudo[815272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 05:47:48 pan sudo[815272]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:48 pan sudo[815272]: pam_unix(sudo:session): session closed for user root May 1 05:47:48 pan sudo[815276]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qgVyimD10yqG6dku.~ May 1 05:47:48 pan sudo[815276]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:48 pan sudo[815276]: pam_unix(sudo:session): session closed for user root May 1 05:47:48 pan sudo[815280]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qgVyimD10yqG6dku.~\'' May 1 05:47:48 pan sudo[815280]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:48 pan sudo[815280]: pam_unix(sudo:session): session closed for user root May 1 05:47:48 pan sudo[815285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qgVyimD10yqG6dku.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 05:47:48 pan sudo[815285]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:48 pan sudo[815285]: pam_unix(sudo:session): session closed for user root May 1 05:47:48 pan sudo[815289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 05:47:48 pan sudo[815289]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:48 pan sudo[815289]: pam_unix(sudo:session): session closed for user root May 1 05:47:49 pan sudo[815294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 05:47:49 pan sudo[815294]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:49 pan sudo[815294]: pam_unix(sudo:session): session closed for user root May 1 05:47:49 pan sudo[815299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 05:47:49 pan sudo[815299]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:49 pan sudo[815299]: pam_unix(sudo:session): session closed for user root May 1 05:47:49 pan sudo[815511]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 05:47:49 pan sudo[815511]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 05:47:49 pan sudo[815511]: pam_unix(sudo:session): session closed for user root May 1 05:48:01 pan systemd[815551]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:49:01 pan systemd[815777]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:50:01 pan systemd[815945]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:50:01 pan systemd[815958]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:50:01 pan systemd[815965]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:51:01 pan systemd[816761]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:52:01 pan systemd[816899]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:53:01 pan systemd[817168]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:54:01 pan systemd[817397]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:55:01 pan systemd[817587]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:55:01 pan systemd[817596]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:55:01 pan systemd[817609]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 05:56:01 pan systemd[818562]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:57:01 pan systemd[818651]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:58:01 pan systemd[818744]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 05:59:01 pan systemd[818979]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 05:59:01 pan systemd[818984]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:00:01 pan systemd[819170]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:00:01 pan systemd[819181]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:00:01 pan systemd[819192]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:01:01 pan systemd[820066]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:02:01 pan systemd[820175]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:03:01 pan systemd[820271]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:03:18 pan sshd[820320]: error: kex_exchange_identification: Connection closed by remote host May 1 06:04:01 pan systemd[820571]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:04:01 pan systemd[820575]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:05:01 pan systemd[820849]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:05:01 pan systemd[820866]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:05:01 pan systemd[820877]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:06:01 pan systemd[821669]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:07:01 pan systemd[821751]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:08:01 pan systemd[822073]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:09:01 pan systemd[822335]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:09:01 pan systemd[822339]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:10:01 pan systemd[822511]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:10:01 pan systemd[822521]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:10:01 pan systemd[822531]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:11:01 pan systemd[823408]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:12:01 pan systemd[823517]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:13:01 pan systemd[823615]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:14:01 pan systemd[823857]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:14:01 pan systemd[823861]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:15:01 pan systemd[824046]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:15:01 pan systemd[824059]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:15:01 pan systemd[824073]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:16:01 pan systemd[824886]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:17:01 pan systemd[824978]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:18:01 pan systemd[825065]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:19:01 pan systemd[825288]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:20:01 pan systemd[825465]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:20:01 pan systemd[825477]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:20:01 pan systemd[825485]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:21:01 pan systemd[826303]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:21:39 pan sshd[826371]: error: kex_exchange_identification: Connection closed by remote host May 1 06:22:01 pan systemd[826413]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:23:01 pan systemd[826736]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:24:01 pan systemd[826961]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:25:01 pan systemd[827131]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:25:01 pan systemd[827142]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:25:01 pan systemd[827152]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:26:01 pan systemd[827935]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:27:01 pan systemd[828033]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:28:01 pan systemd[828113]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:29:01 pan systemd[828240]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:29:01 pan systemd[828245]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:29:54 pan sshd[828473]: Invalid user gialauyacht from 213.209.159.231 port 35260 May 1 06:29:54 pan sshd[828473]: pam_unix(sshd:auth): check pass; user unknown May 1 06:29:54 pan sshd[828473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.231 May 1 06:29:56 pan sshd[828473]: Failed password for invalid user gialauyacht from 213.209.159.231 port 35260 ssh2 May 1 06:29:58 pan sshd[828473]: Connection closed by invalid user gialauyacht 213.209.159.231 port 35260 [preauth] May 1 06:30:01 pan systemd[828551]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:30:01 pan systemd[828566]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:30:01 pan systemd[828571]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:31:01 pan systemd[829357]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:32:01 pan systemd[829456]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:33:01 pan systemd[829547]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:34:01 pan systemd[829660]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:35:01 pan systemd[829946]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:35:01 pan systemd[829960]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:35:01 pan systemd[829969]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:36:01 pan systemd[830771]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:37:01 pan systemd[830867]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:38:01 pan systemd[831199]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:38:22 pan sshd[831245]: error: kex_exchange_identification: Connection closed by remote host May 1 06:38:25 pan sshd[831248]: Invalid user pensaunpo from 213.209.159.231 port 56462 May 1 06:38:25 pan sshd[831248]: pam_unix(sshd:auth): check pass; user unknown May 1 06:38:25 pan sshd[831248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.231 May 1 06:38:27 pan sshd[831248]: Failed password for invalid user pensaunpo from 213.209.159.231 port 56462 ssh2 May 1 06:38:28 pan sshd[831248]: Connection closed by invalid user pensaunpo 213.209.159.231 port 56462 [preauth] May 1 06:39:01 pan systemd[831317]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:39:01 pan systemd[831322]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:40:01 pan systemd[831614]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:40:01 pan systemd[831627]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:40:01 pan systemd[831634]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:40:37 pan sshd[832472]: Invalid user hduser from 121.41.97.232 port 41682 May 1 06:40:37 pan sshd[832472]: pam_unix(sshd:auth): check pass; user unknown May 1 06:40:37 pan sshd[832472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.41.97.232 May 1 06:40:39 pan sshd[832472]: Failed password for invalid user hduser from 121.41.97.232 port 41682 ssh2 May 1 06:40:41 pan sshd[832472]: Connection closed by invalid user hduser 121.41.97.232 port 41682 [preauth] May 1 06:40:42 pan unix_chkpwd[832482]: password check failed for user (root) May 1 06:40:42 pan sshd[832480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.41.97.232 user=root May 1 06:40:43 pan sshd[832480]: Failed password for root from 121.41.97.232 port 41684 ssh2 May 1 06:40:44 pan sshd[832480]: Connection closed by authenticating user root 121.41.97.232 port 41684 [preauth] May 1 06:40:46 pan sshd[832484]: Invalid user zjw from 121.41.97.232 port 45456 May 1 06:40:46 pan sshd[832484]: pam_unix(sshd:auth): check pass; user unknown May 1 06:40:46 pan sshd[832484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.41.97.232 May 1 06:40:48 pan sshd[832484]: Failed password for invalid user zjw from 121.41.97.232 port 45456 ssh2 May 1 06:41:01 pan systemd[832529]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:42:01 pan systemd[832627]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:43:01 pan systemd[832726]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:44:01 pan systemd[832830]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:44:01 pan systemd[832835]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:45:01 pan systemd[833156]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:45:01 pan systemd[833171]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:45:01 pan systemd[833178]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:46:01 pan systemd[833969]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:47:01 pan systemd[834063]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:47:47 pan sudo[834148]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 06:47:47 pan systemd[834152]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:47:47 pan sudo[834148]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:47 pan sudo[834148]: pam_unix(sudo:session): session closed for user root May 1 06:47:47 pan sudo[834166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 06:47:47 pan sudo[834166]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:47 pan sudo[834166]: pam_unix(sudo:session): session closed for user root May 1 06:47:47 pan sudo[834170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 06:47:47 pan sudo[834170]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:47 pan sudo[834170]: pam_unix(sudo:session): session closed for user root May 1 06:47:47 pan sudo[834174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 06:47:47 pan sudo[834174]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:47 pan sudo[834174]: pam_unix(sudo:session): session closed for user root May 1 06:47:47 pan sudo[834178]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 06:47:47 pan sudo[834178]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:47 pan sudo[834178]: pam_unix(sudo:session): session closed for user root May 1 06:47:47 pan sudo[834182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 06:47:47 pan sudo[834182]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:47 pan sudo[834182]: pam_unix(sudo:session): session closed for user root May 1 06:47:48 pan sudo[834187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 06:47:48 pan sudo[834187]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:48 pan sudo[834187]: pam_unix(sudo:session): session closed for user root May 1 06:47:48 pan sudo[834192]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 06:47:48 pan sudo[834192]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:48 pan sudo[834192]: pam_unix(sudo:session): session closed for user root May 1 06:47:48 pan sudo[834199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 06:47:48 pan sudo[834199]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:48 pan sudo[834199]: pam_unix(sudo:session): session closed for user root May 1 06:47:48 pan sudo[834204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 06:47:48 pan sudo[834204]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:48 pan sudo[834204]: pam_unix(sudo:session): session closed for user root May 1 06:47:48 pan sudo[834208]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4H7F5ItsyMWOISLQ.~ May 1 06:47:48 pan sudo[834208]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:48 pan sudo[834208]: pam_unix(sudo:session): session closed for user root May 1 06:47:48 pan sudo[834213]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4H7F5ItsyMWOISLQ.~\'' May 1 06:47:48 pan sudo[834213]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:48 pan sudo[834213]: pam_unix(sudo:session): session closed for user root May 1 06:47:48 pan sudo[834218]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4H7F5ItsyMWOISLQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 06:47:48 pan sudo[834218]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:48 pan sudo[834218]: pam_unix(sudo:session): session closed for user root May 1 06:47:48 pan sudo[834224]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 06:47:48 pan sudo[834224]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:48 pan sudo[834224]: pam_unix(sudo:session): session closed for user root May 1 06:47:49 pan sudo[834230]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 06:47:49 pan sudo[834230]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:49 pan sudo[834230]: pam_unix(sudo:session): session closed for user root May 1 06:47:49 pan sudo[834235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 06:47:49 pan sudo[834235]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:49 pan sudo[834235]: pam_unix(sudo:session): session closed for user root May 1 06:47:49 pan sudo[834448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 06:47:49 pan sudo[834448]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:47:49 pan sudo[834448]: pam_unix(sudo:session): session closed for user root May 1 06:48:01 pan systemd[834490]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:48:36 pan sshd[834597]: error: kex_exchange_identification: client sent invalid protocol identifier "" May 1 06:49:01 pan systemd[834670]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:49:51 pan sshd[835024]: Connection closed by 18.116.101.220 port 57980 [preauth] May 1 06:50:01 pan systemd[835114]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:50:02 pan systemd[835129]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:50:02 pan systemd[835134]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:51:01 pan systemd[835915]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:52:01 pan systemd[836064]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:52:47 pan sudo[836362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 06:52:47 pan systemd[836366]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:52:47 pan sudo[836362]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:47 pan sudo[836362]: pam_unix(sudo:session): session closed for user root May 1 06:52:47 pan sudo[836378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 06:52:47 pan sudo[836378]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:47 pan sudo[836378]: pam_unix(sudo:session): session closed for user root May 1 06:52:47 pan sudo[836383]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 06:52:47 pan sudo[836383]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:47 pan sudo[836383]: pam_unix(sudo:session): session closed for user root May 1 06:52:47 pan sudo[836388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_links user=bangherangstudio --output=json' May 1 06:52:47 pan sudo[836388]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:47 pan sudo[836388]: pam_unix(sudo:session): session closed for user root May 1 06:52:50 pan sudo[836404]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ilgiardinodisilvia.villasilvia.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:52:50 pan systemd[836408]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:52:50 pan sudo[836404]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:52:50 pan sudo[836404]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:52:50 pan sudo[836422]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio LangPHP php_get_vhost_versions --output=json' May 1 06:52:50 pan sudo[836422]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:51 pan sudo[836422]: pam_unix(sudo:session): session closed for user root May 1 06:52:51 pan sudo[836427]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json' May 1 06:52:51 pan sudo[836427]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:51 pan sudo[836427]: pam_unix(sudo:session): session closed for user root May 1 06:52:51 pan sudo[836434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:52:51 pan sudo[836434]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:51 pan sudo[836434]: pam_unix(sudo:session): session closed for user root May 1 06:52:52 pan sudo[836447]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=ilgiardinodisilvia.villasilvia.it return_https_redirect_status=1 --output=json' May 1 06:52:52 pan sudo[836447]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:52 pan sudo[836447]: pam_unix(sudo:session): session closed for user root May 1 06:52:52 pan sudo[836453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_vhost_ssl_components --output=json' May 1 06:52:52 pan sudo[836453]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:52 pan sudo[836453]: pam_unix(sudo:session): session closed for user root May 1 06:52:52 pan sudo[836458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 fetch_ssl_vhosts --output=json' May 1 06:52:52 pan sudo[836458]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:52 pan sudo[836458]: pam_unix(sudo:session): session closed for user root May 1 06:52:52 pan sudo[836463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio Mime list_redirects --output=json' May 1 06:52:52 pan sudo[836463]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:52 pan sudo[836463]: pam_unix(sudo:session): session closed for user root May 1 06:52:53 pan sudo[836499]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/ilgiardinodisilvia.villasilvia.it --output=json' May 1 06:52:53 pan sudo[836499]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:53 pan sudo[836499]: pam_unix(sudo:session): session closed for user root May 1 06:52:56 pan sudo[836664]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=ortart.villasilvia.it return_https_redirect_status=1 --output=json' May 1 06:52:56 pan sudo[836664]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:56 pan sudo[836664]: pam_unix(sudo:session): session closed for user root May 1 06:52:56 pan sudo[836676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ortart.villasilvia.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:52:56 pan sudo[836676]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:52:56 pan sudo[836676]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:52:56 pan sudo[836681]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:52:56 pan sudo[836681]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:52:56 pan sudo[836681]: pam_unix(sudo:session): session closed for user root May 1 06:53:05 pan sudo[836723]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/scuola.villasilvia.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:53:05 pan sudo[836723]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:05 pan sudo[836723]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:05 pan sudo[836728]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:53:05 pan sudo[836728]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:05 pan sudo[836728]: pam_unix(sudo:session): session closed for user root May 1 06:53:07 pan sudo[836746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=scuola.villasilvia.it return_https_redirect_status=1 --output=json' May 1 06:53:07 pan sudo[836746]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:07 pan sudo[836746]: pam_unix(sudo:session): session closed for user root May 1 06:53:07 pan sudo[836782]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/scuola.villasilvia.it --output=json' May 1 06:53:07 pan sudo[836782]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:07 pan sudo[836782]: pam_unix(sudo:session): session closed for user root May 1 06:53:14 pan sudo[836945]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/villasilvia.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:53:14 pan sudo[836945]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:14 pan sudo[836945]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:14 pan sudo[836950]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php83 --output=json' May 1 06:53:14 pan sudo[836950]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:15 pan sudo[836950]: pam_unix(sudo:session): session closed for user root May 1 06:53:15 pan sudo[836957]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:53:15 pan sudo[836957]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:15 pan sudo[836957]: pam_unix(sudo:session): session closed for user root May 1 06:53:15 pan sudo[836970]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=villasilvia.it return_https_redirect_status=1 --output=json' May 1 06:53:15 pan sudo[836970]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:15 pan sudo[836970]: pam_unix(sudo:session): session closed for user root May 1 06:53:16 pan sudo[837007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/villasilvia.it --output=json' May 1 06:53:16 pan sudo[837007]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:16 pan sudo[837007]: pam_unix(sudo:session): session closed for user root May 1 06:53:22 pan sudo[837190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaonlus.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:53:22 pan sudo[837190]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:22 pan sudo[837190]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:22 pan sudo[837195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php85 --output=json' May 1 06:53:22 pan sudo[837195]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:23 pan sudo[837195]: pam_unix(sudo:session): session closed for user root May 1 06:53:23 pan sudo[837203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:53:23 pan sudo[837203]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:23 pan sudo[837203]: pam_unix(sudo:session): session closed for user root May 1 06:53:23 pan sudo[837216]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=ariaonlus.it return_https_redirect_status=1 --output=json' May 1 06:53:23 pan sudo[837216]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:23 pan sudo[837216]: pam_unix(sudo:session): session closed for user root May 1 06:53:24 pan sudo[837252]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/ariaonlus.it --output=json' May 1 06:53:24 pan sudo[837252]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:24 pan sudo[837252]: pam_unix(sudo:session): session closed for user root May 1 06:53:24 pan sudo[837296]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaonlus.it && find /home/bangherangstudio/ariaonlus.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:24 pan sudo[837296]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:24 pan sudo[837296]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:24 pan sudo[837300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaonlus.it && find /home/bangherangstudio/ariaonlus.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:24 pan sudo[837300]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:24 pan sudo[837300]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:24 pan sudo[837300]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:24 pan sudo[837300]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:24 pan sudo[837300]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:24 pan sudo[837300]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:24 pan sudo[837304]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaonlus.it && find /home/bangherangstudio/ariaonlus.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:24 pan sudo[837304]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:24 pan sudo[837304]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:24 pan sudo[837304]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:24 pan sudo[837304]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:24 pan sudo[837304]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:24 pan sudo[837304]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:24 pan sudo[837308]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaonlus.it && find /home/bangherangstudio/ariaonlus.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:24 pan sudo[837308]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:24 pan sudo[837308]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:24 pan sudo[837308]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:24 pan sudo[837308]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:24 pan sudo[837308]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:24 pan sudo[837308]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:26 pan sudo[837388]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaonlus.it && find /home/bangherangstudio/ariaonlus.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:26 pan sudo[837388]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:26 pan sudo[837388]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:26 pan sudo[837392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaonlus.it && find /home/bangherangstudio/ariaonlus.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:26 pan sudo[837392]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:26 pan sudo[837392]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:26 pan sudo[837392]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:26 pan sudo[837392]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:26 pan sudo[837392]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:26 pan sudo[837392]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:26 pan sudo[837396]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaonlus.it && find /home/bangherangstudio/ariaonlus.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:26 pan sudo[837396]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:26 pan sudo[837396]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:26 pan sudo[837396]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:26 pan sudo[837396]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:26 pan sudo[837396]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:26 pan sudo[837396]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:26 pan sudo[837400]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaonlus.it && find /home/bangherangstudio/ariaonlus.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:26 pan sudo[837400]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:26 pan sudo[837400]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:26 pan sudo[837400]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:26 pan sudo[837400]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:26 pan sudo[837400]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:26 pan sudo[837400]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:30 pan sudo[837463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/press.gialauyacht.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:53:31 pan sudo[837463]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:31 pan sudo[837463]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:31 pan sudo[837469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php81 --output=json' May 1 06:53:31 pan sudo[837469]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:31 pan sudo[837469]: pam_unix(sudo:session): session closed for user root May 1 06:53:31 pan sudo[837476]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:53:31 pan sudo[837476]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:31 pan sudo[837476]: pam_unix(sudo:session): session closed for user root May 1 06:53:32 pan sudo[837488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=press.gialauyacht.com return_https_redirect_status=1 --output=json' May 1 06:53:32 pan sudo[837488]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:32 pan sudo[837488]: pam_unix(sudo:session): session closed for user root May 1 06:53:32 pan sudo[837524]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/press.gialauyacht.com --output=json' May 1 06:53:32 pan sudo[837524]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:32 pan sudo[837524]: pam_unix(sudo:session): session closed for user root May 1 06:53:33 pan sudo[837567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/press.gialauyacht.com && find /home/bangherangstudio/press.gialauyacht.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:33 pan sudo[837567]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:33 pan sudo[837567]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:33 pan sudo[837571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/press.gialauyacht.com && find /home/bangherangstudio/press.gialauyacht.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:53:33 pan sudo[837571]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:53:33 pan sudo[837571]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:53:33 pan sudo[837571]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:53:33 pan sudo[837571]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:33 pan sudo[837571]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:33 pan sudo[837571]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:33 pan sudo[837575]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/press.gialauyacht.com && find /home/bangherangstudio/press.gialauyacht.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:53:33 pan sudo[837575]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:53:33 pan sudo[837575]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:53:33 pan sudo[837575]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:53:33 pan sudo[837575]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:33 pan sudo[837575]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:33 pan sudo[837575]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:33 pan sudo[837579]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/press.gialauyacht.com && find /home/bangherangstudio/press.gialauyacht.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:53:33 pan sudo[837579]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:53:33 pan sudo[837579]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:53:33 pan sudo[837579]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:53:33 pan sudo[837579]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:33 pan sudo[837579]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:33 pan sudo[837579]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:35 pan sudo[837662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/press.gialauyacht.com && find /home/bangherangstudio/press.gialauyacht.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:35 pan sudo[837662]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:35 pan sudo[837662]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:35 pan sudo[837666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/press.gialauyacht.com && find /home/bangherangstudio/press.gialauyacht.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:53:35 pan sudo[837666]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:53:35 pan sudo[837666]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:53:35 pan sudo[837666]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:53:35 pan sudo[837666]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:35 pan sudo[837666]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:35 pan sudo[837666]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:35 pan sudo[837670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/press.gialauyacht.com && find /home/bangherangstudio/press.gialauyacht.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:53:35 pan sudo[837670]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:53:35 pan sudo[837670]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:53:35 pan sudo[837670]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:53:35 pan sudo[837670]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:35 pan sudo[837670]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:35 pan sudo[837670]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:35 pan sudo[837674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/press.gialauyacht.com && find /home/bangherangstudio/press.gialauyacht.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:53:35 pan sudo[837674]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:53:35 pan sudo[837674]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:53:35 pan sudo[837674]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:53:35 pan sudo[837674]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:35 pan sudo[837674]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:35 pan sudo[837674]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:40 pan sudo[837742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaaps.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:53:40 pan sudo[837742]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:40 pan sudo[837742]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:40 pan sudo[837747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:53:40 pan sudo[837747]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:40 pan sudo[837747]: pam_unix(sudo:session): session closed for user root May 1 06:53:40 pan sudo[837760]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=ariaaps.it return_https_redirect_status=1 --output=json' May 1 06:53:40 pan sudo[837760]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:40 pan sudo[837760]: pam_unix(sudo:session): session closed for user root May 1 06:53:41 pan sudo[837799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/ariaaps.it --output=json' May 1 06:53:41 pan sudo[837799]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:41 pan sudo[837799]: pam_unix(sudo:session): session closed for user root May 1 06:53:42 pan sudo[837842]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaaps.it && find /home/bangherangstudio/ariaaps.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:42 pan sudo[837842]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:42 pan sudo[837842]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:42 pan sudo[837846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaaps.it && find /home/bangherangstudio/ariaaps.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm May 1 06:53:42 pan sudo[837846]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm May 1 06:53:42 pan sudo[837846]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm May 1 06:53:42 pan sudo[837846]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm May 1 06:53:42 pan sudo[837846]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:42 pan sudo[837846]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:42 pan sudo[837846]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:42 pan sudo[837850]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaaps.it && find /home/bangherangstudio/ariaaps.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:42 pan sudo[837850]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:42 pan sudo[837850]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:42 pan sudo[837850]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:42 pan sudo[837850]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:42 pan sudo[837850]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:42 pan sudo[837850]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:42 pan sudo[837854]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaaps.it && find /home/bangherangstudio/ariaaps.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:42 pan sudo[837854]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:42 pan sudo[837854]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:42 pan sudo[837854]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:42 pan sudo[837854]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:42 pan sudo[837854]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:42 pan sudo[837854]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:43 pan sudo[837933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaaps.it && find /home/bangherangstudio/ariaaps.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:43 pan sudo[837933]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:43 pan sudo[837933]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:43 pan sudo[837937]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaaps.it && find /home/bangherangstudio/ariaaps.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm May 1 06:53:43 pan sudo[837937]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm May 1 06:53:43 pan sudo[837937]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm May 1 06:53:43 pan sudo[837937]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm May 1 06:53:43 pan sudo[837937]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:43 pan sudo[837937]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:43 pan sudo[837937]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:43 pan sudo[837941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaaps.it && find /home/bangherangstudio/ariaaps.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:43 pan sudo[837941]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:43 pan sudo[837941]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:43 pan sudo[837941]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:43 pan sudo[837941]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:43 pan sudo[837941]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:43 pan sudo[837941]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:43 pan sudo[837946]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/ariaaps.it && find /home/bangherangstudio/ariaaps.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:53:43 pan sudo[837946]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:53:43 pan sudo[837946]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:53:43 pan sudo[837946]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:53:43 pan sudo[837946]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:43 pan sudo[837946]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:43 pan sudo[837946]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:47 pan sudo[837990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/trattoriadelgolfo.net && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:53:47 pan sudo[837990]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:47 pan sudo[837990]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:47 pan sudo[837995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:53:47 pan sudo[837995]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:47 pan sudo[837995]: pam_unix(sudo:session): session closed for user root May 1 06:53:48 pan sudo[838008]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=trattoriadelgolfo.net return_https_redirect_status=1 --output=json' May 1 06:53:48 pan sudo[838008]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:48 pan sudo[838008]: pam_unix(sudo:session): session closed for user root May 1 06:53:49 pan sudo[838043]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/trattoriadelgolfo.net --output=json' May 1 06:53:49 pan sudo[838043]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:49 pan sudo[838043]: pam_unix(sudo:session): session closed for user root May 1 06:53:49 pan sudo[838087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/trattoriadelgolfo.net && find /home/bangherangstudio/trattoriadelgolfo.net -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:49 pan sudo[838087]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:49 pan sudo[838087]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:49 pan sudo[838091]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/trattoriadelgolfo.net && find /home/bangherangstudio/trattoriadelgolfo.net/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:53:49 pan sudo[838091]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:53:49 pan sudo[838091]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:53:49 pan sudo[838091]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:53:49 pan sudo[838091]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:49 pan sudo[838091]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:49 pan sudo[838091]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:49 pan sudo[838095]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/trattoriadelgolfo.net && find /home/bangherangstudio/trattoriadelgolfo.net/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:53:49 pan sudo[838095]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:53:49 pan sudo[838095]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:53:49 pan sudo[838095]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:53:49 pan sudo[838095]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:49 pan sudo[838095]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:50 pan sudo[838095]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:50 pan sudo[838100]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/trattoriadelgolfo.net && find /home/bangherangstudio/trattoriadelgolfo.net/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:53:50 pan sudo[838100]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:53:50 pan sudo[838100]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:53:50 pan sudo[838100]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:53:50 pan sudo[838100]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:50 pan sudo[838100]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:50 pan sudo[838100]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:51 pan sudo[838179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/trattoriadelgolfo.net && find /home/bangherangstudio/trattoriadelgolfo.net -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:51 pan sudo[838179]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:51 pan sudo[838179]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:51 pan sudo[838183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/trattoriadelgolfo.net && find /home/bangherangstudio/trattoriadelgolfo.net/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:53:51 pan sudo[838183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:53:51 pan sudo[838183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:53:51 pan sudo[838183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:53:51 pan sudo[838183]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:51 pan sudo[838183]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:51 pan sudo[838183]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:51 pan sudo[838187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/trattoriadelgolfo.net && find /home/bangherangstudio/trattoriadelgolfo.net/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:53:51 pan sudo[838187]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:53:51 pan sudo[838187]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:53:51 pan sudo[838187]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:53:51 pan sudo[838187]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:51 pan sudo[838187]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:52 pan sudo[838187]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:52 pan sudo[838191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/trattoriadelgolfo.net && find /home/bangherangstudio/trattoriadelgolfo.net/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:53:52 pan sudo[838191]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:53:52 pan sudo[838191]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:53:52 pan sudo[838191]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:53:52 pan sudo[838191]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:52 pan sudo[838191]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:52 pan sudo[838191]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:55 pan sudo[838253]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidavelacup.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:53:55 pan sudo[838253]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:55 pan sudo[838253]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:55 pan sudo[838258]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:53:55 pan sudo[838258]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:55 pan sudo[838258]: pam_unix(sudo:session): session closed for user root May 1 06:53:56 pan sudo[838275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=procidavelacup.it return_https_redirect_status=1 --output=json' May 1 06:53:56 pan sudo[838275]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:56 pan sudo[838275]: pam_unix(sudo:session): session closed for user root May 1 06:53:56 pan sudo[838318]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/procidavelacup.it --output=json' May 1 06:53:56 pan sudo[838318]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:53:56 pan sudo[838318]: pam_unix(sudo:session): session closed for user root May 1 06:53:57 pan sudo[838361]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidavelacup.it && find /home/bangherangstudio/procidavelacup.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:57 pan sudo[838361]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:57 pan sudo[838361]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:57 pan sudo[838365]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidavelacup.it && find /home/bangherangstudio/procidavelacup.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:53:57 pan sudo[838365]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:53:57 pan sudo[838365]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:53:57 pan sudo[838365]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:53:57 pan sudo[838365]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:57 pan sudo[838365]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:57 pan sudo[838365]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:57 pan sudo[838369]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidavelacup.it && find /home/bangherangstudio/procidavelacup.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:53:57 pan sudo[838369]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:53:57 pan sudo[838369]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:53:57 pan sudo[838369]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:53:57 pan sudo[838369]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:57 pan sudo[838369]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:57 pan sudo[838369]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:57 pan sudo[838373]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidavelacup.it && find /home/bangherangstudio/procidavelacup.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:53:57 pan sudo[838373]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:53:57 pan sudo[838373]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:53:57 pan sudo[838373]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:53:57 pan sudo[838373]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:57 pan sudo[838373]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:57 pan sudo[838373]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:59 pan sudo[838448]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidavelacup.it && find /home/bangherangstudio/procidavelacup.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:59 pan sudo[838448]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:59 pan sudo[838448]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:59 pan sudo[838452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidavelacup.it && find /home/bangherangstudio/procidavelacup.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:53:59 pan sudo[838452]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:53:59 pan sudo[838452]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:53:59 pan sudo[838452]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:53:59 pan sudo[838452]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:59 pan sudo[838452]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:59 pan sudo[838452]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:59 pan sudo[838456]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidavelacup.it && find /home/bangherangstudio/procidavelacup.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:53:59 pan sudo[838456]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:53:59 pan sudo[838456]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:53:59 pan sudo[838456]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:53:59 pan sudo[838456]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:59 pan sudo[838456]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:59 pan sudo[838456]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:53:59 pan sudo[838460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidavelacup.it && find /home/bangherangstudio/procidavelacup.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:53:59 pan sudo[838460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:53:59 pan sudo[838460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:53:59 pan sudo[838460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:53:59 pan sudo[838460]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:53:59 pan sudo[838460]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:53:59 pan sudo[838460]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:03 pan sudo[838542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/nutrizionistaragosta.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:54:03 pan sudo[838542]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:03 pan sudo[838542]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:03 pan sudo[838547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:54:03 pan sudo[838547]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:03 pan sudo[838547]: pam_unix(sudo:session): session closed for user root May 1 06:54:03 pan sudo[838560]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=nutrizionistaragosta.it return_https_redirect_status=1 --output=json' May 1 06:54:03 pan sudo[838560]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:04 pan sudo[838560]: pam_unix(sudo:session): session closed for user root May 1 06:54:04 pan sudo[838597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/nutrizionistaragosta.it --output=json' May 1 06:54:04 pan sudo[838597]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:04 pan sudo[838597]: pam_unix(sudo:session): session closed for user root May 1 06:54:05 pan sudo[838641]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/nutrizionistaragosta.it && find /home/bangherangstudio/nutrizionistaragosta.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:05 pan sudo[838641]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:05 pan sudo[838641]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:05 pan sudo[838645]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/nutrizionistaragosta.it && find /home/bangherangstudio/nutrizionistaragosta.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:54:05 pan sudo[838645]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:54:05 pan sudo[838645]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:54:05 pan sudo[838645]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:54:05 pan sudo[838645]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:05 pan sudo[838645]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:05 pan sudo[838645]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:05 pan sudo[838649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/nutrizionistaragosta.it && find /home/bangherangstudio/nutrizionistaragosta.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:54:05 pan sudo[838649]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:54:05 pan sudo[838649]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:54:05 pan sudo[838649]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:54:05 pan sudo[838649]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:05 pan sudo[838649]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:05 pan sudo[838649]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:05 pan sudo[838653]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/nutrizionistaragosta.it && find /home/bangherangstudio/nutrizionistaragosta.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:54:05 pan sudo[838653]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:54:05 pan sudo[838653]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:54:05 pan sudo[838653]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:54:05 pan sudo[838653]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:05 pan sudo[838653]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:05 pan sudo[838653]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:07 pan sudo[838731]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/nutrizionistaragosta.it && find /home/bangherangstudio/nutrizionistaragosta.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:07 pan sudo[838731]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:07 pan sudo[838731]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:07 pan sudo[838735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/nutrizionistaragosta.it && find /home/bangherangstudio/nutrizionistaragosta.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:54:07 pan sudo[838735]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:54:07 pan sudo[838735]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:54:07 pan sudo[838735]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:54:07 pan sudo[838735]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:07 pan sudo[838735]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:07 pan sudo[838735]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:07 pan sudo[838739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/nutrizionistaragosta.it && find /home/bangherangstudio/nutrizionistaragosta.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:54:07 pan sudo[838739]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:54:07 pan sudo[838739]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:54:07 pan sudo[838739]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:54:07 pan sudo[838739]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:07 pan sudo[838739]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:07 pan sudo[838739]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:07 pan sudo[838743]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/nutrizionistaragosta.it && find /home/bangherangstudio/nutrizionistaragosta.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:54:07 pan sudo[838743]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:54:07 pan sudo[838743]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:54:07 pan sudo[838743]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:54:07 pan sudo[838743]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:07 pan sudo[838743]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:07 pan sudo[838743]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:11 pan sudo[838784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/michelerussoimmobiliare.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:54:11 pan sudo[838784]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:11 pan sudo[838784]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:11 pan sudo[838789]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:54:11 pan sudo[838789]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:11 pan sudo[838789]: pam_unix(sudo:session): session closed for user root May 1 06:54:11 pan sudo[838803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=michelerussoimmobiliare.it return_https_redirect_status=1 --output=json' May 1 06:54:11 pan sudo[838803]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:11 pan sudo[838803]: pam_unix(sudo:session): session closed for user root May 1 06:54:12 pan sudo[838840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/michelerussoimmobiliare.it --output=json' May 1 06:54:12 pan sudo[838840]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:12 pan sudo[838840]: pam_unix(sudo:session): session closed for user root May 1 06:54:12 pan sudo[838884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/michelerussoimmobiliare.it && find /home/bangherangstudio/michelerussoimmobiliare.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:12 pan sudo[838884]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:13 pan sudo[838884]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:13 pan sudo[838888]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/michelerussoimmobiliare.it && find /home/bangherangstudio/michelerussoimmobiliare.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:54:13 pan sudo[838888]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:54:13 pan sudo[838888]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:54:13 pan sudo[838888]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:54:13 pan sudo[838888]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:13 pan sudo[838888]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:13 pan sudo[838888]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:13 pan sudo[838892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/michelerussoimmobiliare.it && find /home/bangherangstudio/michelerussoimmobiliare.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o May 1 06:54:13 pan sudo[838892]: wp-toolkit : (command continued) \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o May 1 06:54:13 pan sudo[838892]: wp-toolkit : (command continued) \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o May 1 06:54:13 pan sudo[838892]: wp-toolkit : (command continued) \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o May 1 06:54:13 pan sudo[838892]: wp-toolkit : (command continued) \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:13 pan sudo[838892]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:13 pan sudo[838892]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:13 pan sudo[838896]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/michelerussoimmobiliare.it && find /home/bangherangstudio/michelerussoimmobiliare.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o May 1 06:54:13 pan sudo[838896]: wp-toolkit : (command continued) \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o May 1 06:54:13 pan sudo[838896]: wp-toolkit : (command continued) \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o May 1 06:54:13 pan sudo[838896]: wp-toolkit : (command continued) \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o May 1 06:54:13 pan sudo[838896]: wp-toolkit : (command continued) \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:13 pan sudo[838896]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:13 pan sudo[838896]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:14 pan sudo[838976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/michelerussoimmobiliare.it && find /home/bangherangstudio/michelerussoimmobiliare.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:14 pan sudo[838976]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:14 pan sudo[838976]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:14 pan sudo[838980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/michelerussoimmobiliare.it && find /home/bangherangstudio/michelerussoimmobiliare.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:54:14 pan sudo[838980]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:54:14 pan sudo[838980]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:54:14 pan sudo[838980]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:54:14 pan sudo[838980]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:14 pan sudo[838980]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:14 pan sudo[838980]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:14 pan sudo[838984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/michelerussoimmobiliare.it && find /home/bangherangstudio/michelerussoimmobiliare.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o May 1 06:54:14 pan sudo[838984]: wp-toolkit : (command continued) \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o May 1 06:54:14 pan sudo[838984]: wp-toolkit : (command continued) \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o May 1 06:54:14 pan sudo[838984]: wp-toolkit : (command continued) \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o May 1 06:54:14 pan sudo[838984]: wp-toolkit : (command continued) \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:14 pan sudo[838984]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:14 pan sudo[838984]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:14 pan sudo[838988]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/michelerussoimmobiliare.it && find /home/bangherangstudio/michelerussoimmobiliare.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o May 1 06:54:14 pan sudo[838988]: wp-toolkit : (command continued) \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o May 1 06:54:14 pan sudo[838988]: wp-toolkit : (command continued) \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o May 1 06:54:14 pan sudo[838988]: wp-toolkit : (command continued) \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o May 1 06:54:14 pan sudo[838988]: wp-toolkit : (command continued) \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:14 pan sudo[838988]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:14 pan sudo[838988]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:15 pan sudo[839037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=caffediportacastello.it return_https_redirect_status=1 --output=json' May 1 06:54:15 pan sudo[839037]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:16 pan sudo[839037]: pam_unix(sudo:session): session closed for user root May 1 06:54:16 pan sudo[839049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/caffediportacastello.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:54:16 pan sudo[839049]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:16 pan sudo[839049]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:16 pan sudo[839054]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:54:16 pan sudo[839054]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:16 pan sudo[839054]: pam_unix(sudo:session): session closed for user root May 1 06:54:16 pan sudo[839075]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=parquettistanapoli.it return_https_redirect_status=1 --output=json' May 1 06:54:16 pan sudo[839075]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:16 pan sudo[839075]: pam_unix(sudo:session): session closed for user root May 1 06:54:16 pan sudo[839087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:54:16 pan sudo[839087]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:16 pan sudo[839087]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:16 pan sudo[839093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:54:16 pan sudo[839093]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:16 pan sudo[839093]: pam_unix(sudo:session): session closed for user root May 1 06:54:19 pan sudo[839128]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:54:19 pan sudo[839128]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:19 pan sudo[839128]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:19 pan sudo[839133]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:54:19 pan sudo[839133]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:19 pan sudo[839133]: pam_unix(sudo:session): session closed for user root May 1 06:54:20 pan sudo[839176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli --output=json' May 1 06:54:20 pan sudo[839176]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:20 pan sudo[839176]: pam_unix(sudo:session): session closed for user root May 1 06:54:21 pan sudo[839231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli && find /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:21 pan sudo[839231]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:21 pan sudo[839231]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:21 pan sudo[839235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli && find /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o May 1 06:54:21 pan sudo[839235]: wp-toolkit : (command continued) \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o May 1 06:54:21 pan sudo[839235]: wp-toolkit : (command continued) \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o May 1 06:54:21 pan sudo[839235]: wp-toolkit : (command continued) \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o May 1 06:54:21 pan sudo[839235]: wp-toolkit : (command continued) \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:21 pan sudo[839235]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:21 pan sudo[839235]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:21 pan sudo[839239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli && find /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' May 1 06:54:21 pan sudo[839239]: wp-toolkit : (command continued) -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' May 1 06:54:21 pan sudo[839239]: wp-toolkit : (command continued) -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' May 1 06:54:21 pan sudo[839239]: wp-toolkit : (command continued) -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' May 1 06:54:21 pan sudo[839239]: wp-toolkit : (command continued) -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:21 pan sudo[839239]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:21 pan sudo[839239]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:21 pan sudo[839243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli && find /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' May 1 06:54:21 pan sudo[839243]: wp-toolkit : (command continued) -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' May 1 06:54:21 pan sudo[839243]: wp-toolkit : (command continued) -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' May 1 06:54:21 pan sudo[839243]: wp-toolkit : (command continued) -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' May 1 06:54:21 pan sudo[839243]: wp-toolkit : (command continued) -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:21 pan sudo[839243]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:21 pan sudo[839243]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:23 pan sudo[839331]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli && find /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:23 pan sudo[839331]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:23 pan sudo[839331]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:23 pan sudo[839335]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli && find /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o May 1 06:54:23 pan sudo[839335]: wp-toolkit : (command continued) \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o May 1 06:54:23 pan sudo[839335]: wp-toolkit : (command continued) \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o May 1 06:54:23 pan sudo[839335]: wp-toolkit : (command continued) \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o May 1 06:54:23 pan sudo[839335]: wp-toolkit : (command continued) \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:23 pan sudo[839335]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:23 pan sudo[839335]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:23 pan sudo[839339]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli && find /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' May 1 06:54:23 pan sudo[839339]: wp-toolkit : (command continued) -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' May 1 06:54:23 pan sudo[839339]: wp-toolkit : (command continued) -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' May 1 06:54:23 pan sudo[839339]: wp-toolkit : (command continued) -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' May 1 06:54:23 pan sudo[839339]: wp-toolkit : (command continued) -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:23 pan sudo[839339]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:23 pan sudo[839339]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:23 pan sudo[839343]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli && find /home/bangherangstudio/parquettistanapoli.it/posa-parquet-napoli/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' May 1 06:54:23 pan sudo[839343]: wp-toolkit : (command continued) -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' May 1 06:54:23 pan sudo[839343]: wp-toolkit : (command continued) -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' May 1 06:54:23 pan sudo[839343]: wp-toolkit : (command continued) -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' May 1 06:54:23 pan sudo[839343]: wp-toolkit : (command continued) -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:23 pan sudo[839343]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:23 pan sudo[839343]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:28 pan sudo[839406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/impiantipinna.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:54:28 pan sudo[839406]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:28 pan sudo[839406]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:28 pan sudo[839411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:54:28 pan sudo[839411]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:28 pan sudo[839411]: pam_unix(sudo:session): session closed for user root May 1 06:54:28 pan sudo[839424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=impiantipinna.it return_https_redirect_status=1 --output=json' May 1 06:54:28 pan sudo[839424]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:28 pan sudo[839424]: pam_unix(sudo:session): session closed for user root May 1 06:54:29 pan sudo[839460]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/impiantipinna.it --output=json' May 1 06:54:29 pan sudo[839460]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:29 pan sudo[839460]: pam_unix(sudo:session): session closed for user root May 1 06:54:29 pan sudo[839505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/impiantipinna.it && find /home/bangherangstudio/impiantipinna.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:29 pan sudo[839505]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:29 pan sudo[839505]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:30 pan sudo[839509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/impiantipinna.it && find /home/bangherangstudio/impiantipinna.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:54:30 pan sudo[839509]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:54:30 pan sudo[839509]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:54:30 pan sudo[839509]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:54:30 pan sudo[839509]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:30 pan sudo[839509]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:30 pan sudo[839509]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:30 pan sudo[839513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/impiantipinna.it && find /home/bangherangstudio/impiantipinna.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:54:30 pan sudo[839513]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:54:30 pan sudo[839513]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:54:30 pan sudo[839513]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:54:30 pan sudo[839513]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:30 pan sudo[839513]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:30 pan sudo[839513]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:30 pan sudo[839517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/impiantipinna.it && find /home/bangherangstudio/impiantipinna.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:54:30 pan sudo[839517]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:54:30 pan sudo[839517]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:54:30 pan sudo[839517]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:54:30 pan sudo[839517]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:30 pan sudo[839517]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:30 pan sudo[839517]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:31 pan sudo[839600]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/impiantipinna.it && find /home/bangherangstudio/impiantipinna.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:31 pan sudo[839600]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:31 pan sudo[839600]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:31 pan sudo[839604]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/impiantipinna.it && find /home/bangherangstudio/impiantipinna.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:54:31 pan sudo[839604]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:54:31 pan sudo[839604]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:54:31 pan sudo[839604]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:54:31 pan sudo[839604]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:31 pan sudo[839604]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:31 pan sudo[839604]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:31 pan sudo[839608]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/impiantipinna.it && find /home/bangherangstudio/impiantipinna.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:54:31 pan sudo[839608]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:54:31 pan sudo[839608]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:54:31 pan sudo[839608]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:54:31 pan sudo[839608]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:31 pan sudo[839608]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:31 pan sudo[839608]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:31 pan sudo[839612]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/impiantipinna.it && find /home/bangherangstudio/impiantipinna.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:54:31 pan sudo[839612]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:54:31 pan sudo[839612]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:54:31 pan sudo[839612]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:54:31 pan sudo[839612]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:31 pan sudo[839612]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:31 pan sudo[839612]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:36 pan sudo[839805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/2025finneuropeans.org && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:54:36 pan sudo[839805]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:36 pan sudo[839805]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:36 pan sudo[839810]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:54:36 pan sudo[839810]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:36 pan sudo[839810]: pam_unix(sudo:session): session closed for user root May 1 06:54:36 pan sudo[839824]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=2025finneuropeans.org return_https_redirect_status=1 --output=json' May 1 06:54:36 pan sudo[839824]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:37 pan sudo[839824]: pam_unix(sudo:session): session closed for user root May 1 06:54:37 pan sudo[839860]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/2025finneuropeans.org --output=json' May 1 06:54:37 pan sudo[839860]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:37 pan sudo[839860]: pam_unix(sudo:session): session closed for user root May 1 06:54:38 pan sudo[839904]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/2025finneuropeans.org && find /home/bangherangstudio/2025finneuropeans.org -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:38 pan sudo[839904]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:38 pan sudo[839904]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:38 pan sudo[839908]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/2025finneuropeans.org && find /home/bangherangstudio/2025finneuropeans.org/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:54:38 pan sudo[839908]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:54:38 pan sudo[839908]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:54:38 pan sudo[839908]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:54:38 pan sudo[839908]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:38 pan sudo[839908]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:38 pan sudo[839908]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:38 pan sudo[839912]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/2025finneuropeans.org && find /home/bangherangstudio/2025finneuropeans.org/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:54:38 pan sudo[839912]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:54:38 pan sudo[839912]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:54:38 pan sudo[839912]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:54:38 pan sudo[839912]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:38 pan sudo[839912]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:38 pan sudo[839912]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:40 pan sudo[839991]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/2025finneuropeans.org && find /home/bangherangstudio/2025finneuropeans.org -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:40 pan sudo[839991]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:40 pan sudo[839991]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:40 pan sudo[839995]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/2025finneuropeans.org && find /home/bangherangstudio/2025finneuropeans.org/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:54:40 pan sudo[839995]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:54:40 pan sudo[839995]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:54:40 pan sudo[839995]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:54:40 pan sudo[839995]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:40 pan sudo[839995]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:40 pan sudo[839995]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:40 pan sudo[839999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/2025finneuropeans.org && find /home/bangherangstudio/2025finneuropeans.org/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm May 1 06:54:40 pan sudo[839999]: wp-toolkit : (command continued) 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm May 1 06:54:40 pan sudo[839999]: wp-toolkit : (command continued) 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm May 1 06:54:40 pan sudo[839999]: wp-toolkit : (command continued) 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm May 1 06:54:40 pan sudo[839999]: wp-toolkit : (command continued) 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:40 pan sudo[839999]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:40 pan sudo[839999]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:44 pan sudo[840067]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/pensaunpo.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:54:44 pan sudo[840067]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:44 pan sudo[840067]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:44 pan sudo[840072]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:54:44 pan sudo[840072]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:44 pan sudo[840072]: pam_unix(sudo:session): session closed for user root May 1 06:54:45 pan sudo[840087]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=pensaunpo.it return_https_redirect_status=1 --output=json' May 1 06:54:45 pan sudo[840087]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:45 pan sudo[840087]: pam_unix(sudo:session): session closed for user root May 1 06:54:46 pan sudo[840122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/pensaunpo.it --output=json' May 1 06:54:46 pan sudo[840122]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:46 pan sudo[840122]: pam_unix(sudo:session): session closed for user root May 1 06:54:46 pan sudo[840166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/pensaunpo.it && find /home/bangherangstudio/pensaunpo.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:46 pan sudo[840166]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:46 pan sudo[840166]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:46 pan sudo[840170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/pensaunpo.it && find /home/bangherangstudio/pensaunpo.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:54:46 pan sudo[840170]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:54:46 pan sudo[840170]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:54:46 pan sudo[840170]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:54:46 pan sudo[840170]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:46 pan sudo[840170]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:46 pan sudo[840170]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:46 pan sudo[840174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/pensaunpo.it && find /home/bangherangstudio/pensaunpo.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:54:46 pan sudo[840174]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:54:46 pan sudo[840174]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:54:46 pan sudo[840174]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:54:46 pan sudo[840174]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:46 pan sudo[840174]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:47 pan sudo[840174]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:47 pan sudo[840180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/pensaunpo.it && find /home/bangherangstudio/pensaunpo.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:54:47 pan sudo[840180]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:54:47 pan sudo[840180]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:54:47 pan sudo[840180]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:54:47 pan sudo[840180]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:47 pan sudo[840180]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:47 pan sudo[840180]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:48 pan sudo[840260]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/pensaunpo.it && find /home/bangherangstudio/pensaunpo.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:48 pan sudo[840260]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:48 pan sudo[840260]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:48 pan sudo[840264]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/pensaunpo.it && find /home/bangherangstudio/pensaunpo.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:54:48 pan sudo[840264]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:54:48 pan sudo[840264]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:54:48 pan sudo[840264]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:54:48 pan sudo[840264]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:48 pan sudo[840264]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:48 pan sudo[840264]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:48 pan sudo[840268]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/pensaunpo.it && find /home/bangherangstudio/pensaunpo.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:54:48 pan sudo[840268]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:54:48 pan sudo[840268]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:54:48 pan sudo[840268]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:54:48 pan sudo[840268]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:48 pan sudo[840268]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:48 pan sudo[840268]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:48 pan sudo[840272]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/pensaunpo.it && find /home/bangherangstudio/pensaunpo.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:54:48 pan sudo[840272]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:54:48 pan sudo[840272]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:54:48 pan sudo[840272]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:54:48 pan sudo[840272]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:48 pan sudo[840272]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:48 pan sudo[840272]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:53 pan sudo[840315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/seaoffice.com && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:54:53 pan sudo[840315]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:53 pan sudo[840315]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:53 pan sudo[840320]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:54:53 pan sudo[840320]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:53 pan sudo[840320]: pam_unix(sudo:session): session closed for user root May 1 06:54:53 pan sudo[840336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=seaoffice.com return_https_redirect_status=1 --output=json' May 1 06:54:53 pan sudo[840336]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:53 pan sudo[840336]: pam_unix(sudo:session): session closed for user root May 1 06:54:54 pan sudo[840374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/seaoffice.com --output=json' May 1 06:54:54 pan sudo[840374]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:54:54 pan sudo[840374]: pam_unix(sudo:session): session closed for user root May 1 06:54:55 pan sudo[840417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/seaoffice.com && find /home/bangherangstudio/seaoffice.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:55 pan sudo[840417]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:55 pan sudo[840417]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:55 pan sudo[840421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/seaoffice.com && find /home/bangherangstudio/seaoffice.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:54:55 pan sudo[840421]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:54:55 pan sudo[840421]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:54:55 pan sudo[840421]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:54:55 pan sudo[840421]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:55 pan sudo[840421]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:55 pan sudo[840421]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:55 pan sudo[840425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/seaoffice.com && find /home/bangherangstudio/seaoffice.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:54:55 pan sudo[840425]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:54:55 pan sudo[840425]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:54:55 pan sudo[840425]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:54:55 pan sudo[840425]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:55 pan sudo[840425]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:55 pan sudo[840425]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:55 pan sudo[840429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/seaoffice.com && find /home/bangherangstudio/seaoffice.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:54:55 pan sudo[840429]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:54:55 pan sudo[840429]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:54:55 pan sudo[840429]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:54:55 pan sudo[840429]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:55 pan sudo[840429]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:55 pan sudo[840429]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:57 pan sudo[840508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/seaoffice.com && find /home/bangherangstudio/seaoffice.com -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:57 pan sudo[840508]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:57 pan sudo[840508]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:57 pan sudo[840512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/seaoffice.com && find /home/bangherangstudio/seaoffice.com/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:54:57 pan sudo[840512]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:54:57 pan sudo[840512]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:54:57 pan sudo[840512]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:54:57 pan sudo[840512]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:57 pan sudo[840512]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:57 pan sudo[840512]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:57 pan sudo[840516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/seaoffice.com && find /home/bangherangstudio/seaoffice.com/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:54:57 pan sudo[840516]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:54:57 pan sudo[840516]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:54:57 pan sudo[840516]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:54:57 pan sudo[840516]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:57 pan sudo[840516]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:57 pan sudo[840516]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:54:57 pan sudo[840521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/seaoffice.com && find /home/bangherangstudio/seaoffice.com/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:54:57 pan sudo[840521]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:54:57 pan sudo[840521]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:54:57 pan sudo[840521]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:54:57 pan sudo[840521]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:54:57 pan sudo[840521]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:54:57 pan sudo[840521]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:01 pan sudo[840582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fondazionemassimoleone.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:55:01 pan sudo[840582]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:01 pan sudo[840582]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:01 pan sudo[840587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:55:01 pan sudo[840587]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:01 pan sudo[840587]: pam_unix(sudo:session): session closed for user root May 1 06:55:02 pan systemd[840672]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 06:55:02 pan sudo[840713]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=fondazionemassimoleone.it return_https_redirect_status=1 --output=json' May 1 06:55:02 pan sudo[840713]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:02 pan sudo[840713]: pam_unix(sudo:session): session closed for user root May 1 06:55:03 pan sudo[840825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/fondazionemassimoleone.it --output=json' May 1 06:55:03 pan sudo[840825]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:03 pan sudo[840825]: pam_unix(sudo:session): session closed for user root May 1 06:55:03 pan sudo[840939]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fondazionemassimoleone.it && find /home/bangherangstudio/fondazionemassimoleone.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:03 pan sudo[840939]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:03 pan sudo[840939]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:03 pan sudo[840943]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fondazionemassimoleone.it && find /home/bangherangstudio/fondazionemassimoleone.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:55:03 pan sudo[840943]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:55:03 pan sudo[840943]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:55:03 pan sudo[840943]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:55:03 pan sudo[840943]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:03 pan sudo[840943]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:03 pan sudo[840943]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:03 pan sudo[840948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fondazionemassimoleone.it && find /home/bangherangstudio/fondazionemassimoleone.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:55:03 pan sudo[840948]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:55:03 pan sudo[840948]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:55:03 pan sudo[840948]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:55:03 pan sudo[840948]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:03 pan sudo[840948]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:03 pan sudo[840948]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:03 pan sudo[840953]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fondazionemassimoleone.it && find /home/bangherangstudio/fondazionemassimoleone.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o May 1 06:55:03 pan sudo[840953]: wp-toolkit : (command continued) \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o May 1 06:55:03 pan sudo[840953]: wp-toolkit : (command continued) \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o May 1 06:55:03 pan sudo[840953]: wp-toolkit : (command continued) \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o May 1 06:55:03 pan sudo[840953]: wp-toolkit : (command continued) \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:03 pan sudo[840953]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:03 pan sudo[840953]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:05 pan sudo[841160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fondazionemassimoleone.it && find /home/bangherangstudio/fondazionemassimoleone.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:05 pan sudo[841160]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:05 pan sudo[841160]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:05 pan sudo[841164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fondazionemassimoleone.it && find /home/bangherangstudio/fondazionemassimoleone.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:55:05 pan sudo[841164]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:55:05 pan sudo[841164]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:55:05 pan sudo[841164]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:55:05 pan sudo[841164]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:05 pan sudo[841164]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:05 pan sudo[841164]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:05 pan sudo[841168]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fondazionemassimoleone.it && find /home/bangherangstudio/fondazionemassimoleone.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' May 1 06:55:05 pan sudo[841168]: wp-toolkit : (command continued) -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' May 1 06:55:05 pan sudo[841168]: wp-toolkit : (command continued) -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' May 1 06:55:05 pan sudo[841168]: wp-toolkit : (command continued) -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' May 1 06:55:05 pan sudo[841168]: wp-toolkit : (command continued) -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:05 pan sudo[841168]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:05 pan sudo[841168]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:05 pan sudo[841173]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fondazionemassimoleone.it && find /home/bangherangstudio/fondazionemassimoleone.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o May 1 06:55:05 pan sudo[841173]: wp-toolkit : (command continued) \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o May 1 06:55:05 pan sudo[841173]: wp-toolkit : (command continued) \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o May 1 06:55:05 pan sudo[841173]: wp-toolkit : (command continued) \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o May 1 06:55:05 pan sudo[841173]: wp-toolkit : (command continued) \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:05 pan sudo[841173]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:05 pan sudo[841173]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:12 pan sudo[841594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/bbanticacapri.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:55:12 pan sudo[841594]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:12 pan sudo[841594]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:12 pan sudo[841599]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:55:12 pan sudo[841599]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:12 pan sudo[841599]: pam_unix(sudo:session): session closed for user root May 1 06:55:12 pan sudo[841613]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=bbanticacapri.it return_https_redirect_status=1 --output=json' May 1 06:55:12 pan sudo[841613]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:13 pan sudo[841613]: pam_unix(sudo:session): session closed for user root May 1 06:55:13 pan sudo[841650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/bbanticacapri.it --output=json' May 1 06:55:13 pan sudo[841650]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:13 pan sudo[841650]: pam_unix(sudo:session): session closed for user root May 1 06:55:14 pan sudo[841693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/bbanticacapri.it && find /home/bangherangstudio/bbanticacapri.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:14 pan sudo[841693]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:14 pan sudo[841693]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:14 pan sudo[841697]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/bbanticacapri.it && find /home/bangherangstudio/bbanticacapri.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:14 pan sudo[841697]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:14 pan sudo[841697]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:14 pan sudo[841697]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:14 pan sudo[841697]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:14 pan sudo[841697]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:14 pan sudo[841697]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:14 pan sudo[841701]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/bbanticacapri.it && find /home/bangherangstudio/bbanticacapri.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:55:14 pan sudo[841701]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:55:14 pan sudo[841701]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:55:14 pan sudo[841701]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:55:14 pan sudo[841701]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:14 pan sudo[841701]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:14 pan sudo[841701]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:15 pan sudo[841780]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/bbanticacapri.it && find /home/bangherangstudio/bbanticacapri.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:15 pan sudo[841780]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:15 pan sudo[841780]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:15 pan sudo[841784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/bbanticacapri.it && find /home/bangherangstudio/bbanticacapri.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:15 pan sudo[841784]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:15 pan sudo[841784]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:15 pan sudo[841784]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:15 pan sudo[841784]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:15 pan sudo[841784]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:15 pan sudo[841784]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:15 pan sudo[841788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/bbanticacapri.it && find /home/bangherangstudio/bbanticacapri.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:55:15 pan sudo[841788]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:55:15 pan sudo[841788]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:55:15 pan sudo[841788]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:55:15 pan sudo[841788]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:15 pan sudo[841788]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:15 pan sudo[841788]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:20 pan sudo[841835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/covielloshowroom.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:55:20 pan sudo[841835]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:20 pan sudo[841835]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:20 pan sudo[841841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:55:20 pan sudo[841841]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:20 pan sudo[841841]: pam_unix(sudo:session): session closed for user root May 1 06:55:21 pan sudo[841859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=covielloshowroom.it return_https_redirect_status=1 --output=json' May 1 06:55:21 pan sudo[841859]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:21 pan sudo[841859]: pam_unix(sudo:session): session closed for user root May 1 06:55:21 pan sudo[841895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/covielloshowroom.it --output=json' May 1 06:55:21 pan sudo[841895]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:21 pan sudo[841895]: pam_unix(sudo:session): session closed for user root May 1 06:55:22 pan sudo[841940]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/covielloshowroom.it && find /home/bangherangstudio/covielloshowroom.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:22 pan sudo[841940]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:22 pan sudo[841940]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:22 pan sudo[841944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/covielloshowroom.it && find /home/bangherangstudio/covielloshowroom.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:55:22 pan sudo[841944]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:55:22 pan sudo[841944]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:55:22 pan sudo[841944]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:55:22 pan sudo[841944]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:22 pan sudo[841944]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:22 pan sudo[841944]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:22 pan sudo[841949]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/covielloshowroom.it && find /home/bangherangstudio/covielloshowroom.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:55:22 pan sudo[841949]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:55:22 pan sudo[841949]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:55:22 pan sudo[841949]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:55:22 pan sudo[841949]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:22 pan sudo[841949]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:22 pan sudo[841949]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:24 pan sudo[842027]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/covielloshowroom.it && find /home/bangherangstudio/covielloshowroom.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:24 pan sudo[842027]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:24 pan sudo[842027]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:24 pan sudo[842031]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/covielloshowroom.it && find /home/bangherangstudio/covielloshowroom.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:55:24 pan sudo[842031]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:55:24 pan sudo[842031]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:55:24 pan sudo[842031]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:55:24 pan sudo[842031]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:24 pan sudo[842031]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:24 pan sudo[842031]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:24 pan sudo[842035]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/covielloshowroom.it && find /home/bangherangstudio/covielloshowroom.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:55:24 pan sudo[842035]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:55:24 pan sudo[842035]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:55:24 pan sudo[842035]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:55:24 pan sudo[842035]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:24 pan sudo[842035]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:24 pan sudo[842035]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:25 pan sudo[842084]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=fisiosteel.it return_https_redirect_status=1 --output=json' May 1 06:55:25 pan sudo[842084]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:25 pan sudo[842084]: pam_unix(sudo:session): session closed for user root May 1 06:55:25 pan sudo[842096]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/fisiosteel.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:55:25 pan sudo[842096]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:25 pan sudo[842096]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:25 pan sudo[842101]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:55:25 pan sudo[842101]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:25 pan sudo[842101]: pam_unix(sudo:session): session closed for user root May 1 06:55:29 pan sudo[842130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/kuluridis.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:55:29 pan sudo[842130]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:29 pan sudo[842130]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:29 pan sudo[842135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:55:29 pan sudo[842135]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:29 pan sudo[842135]: pam_unix(sudo:session): session closed for user root May 1 06:55:29 pan sudo[842149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=kuluridis.it return_https_redirect_status=1 --output=json' May 1 06:55:29 pan sudo[842149]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:29 pan sudo[842149]: pam_unix(sudo:session): session closed for user root May 1 06:55:30 pan sudo[842185]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/kuluridis.it --output=json' May 1 06:55:30 pan sudo[842185]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:30 pan sudo[842185]: pam_unix(sudo:session): session closed for user root May 1 06:55:30 pan sudo[842229]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/kuluridis.it && find /home/bangherangstudio/kuluridis.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:30 pan sudo[842229]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:30 pan sudo[842229]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:30 pan sudo[842233]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/kuluridis.it && find /home/bangherangstudio/kuluridis.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:55:30 pan sudo[842233]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:55:30 pan sudo[842233]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:55:30 pan sudo[842233]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:55:30 pan sudo[842233]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:30 pan sudo[842233]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:30 pan sudo[842233]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:30 pan sudo[842237]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/kuluridis.it && find /home/bangherangstudio/kuluridis.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:55:30 pan sudo[842237]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:55:30 pan sudo[842237]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:55:30 pan sudo[842237]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:55:30 pan sudo[842237]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:30 pan sudo[842237]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:31 pan sudo[842237]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:31 pan sudo[842241]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/kuluridis.it && find /home/bangherangstudio/kuluridis.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:55:31 pan sudo[842241]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:55:31 pan sudo[842241]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:55:31 pan sudo[842241]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:55:31 pan sudo[842241]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:31 pan sudo[842241]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:31 pan sudo[842241]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:32 pan sudo[842334]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/kuluridis.it && find /home/bangherangstudio/kuluridis.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:32 pan sudo[842334]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:32 pan sudo[842334]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:32 pan sudo[842338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/kuluridis.it && find /home/bangherangstudio/kuluridis.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:55:32 pan sudo[842338]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:55:32 pan sudo[842338]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:55:32 pan sudo[842338]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:55:32 pan sudo[842338]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:32 pan sudo[842338]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:32 pan sudo[842338]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:32 pan sudo[842342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/kuluridis.it && find /home/bangherangstudio/kuluridis.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:55:32 pan sudo[842342]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:55:32 pan sudo[842342]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:55:32 pan sudo[842342]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:55:32 pan sudo[842342]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:32 pan sudo[842342]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:32 pan sudo[842342]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:32 pan sudo[842346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/kuluridis.it && find /home/bangherangstudio/kuluridis.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' May 1 06:55:32 pan sudo[842346]: wp-toolkit : (command continued) -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' May 1 06:55:32 pan sudo[842346]: wp-toolkit : (command continued) -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' May 1 06:55:32 pan sudo[842346]: wp-toolkit : (command continued) -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' May 1 06:55:32 pan sudo[842346]: wp-toolkit : (command continued) -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:32 pan sudo[842346]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:32 pan sudo[842346]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:37 pan sudo[842392]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/mp.crvitalia.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:55:37 pan sudo[842392]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:37 pan sudo[842392]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:37 pan sudo[842397]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php74 --output=json' May 1 06:55:37 pan sudo[842397]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:37 pan sudo[842397]: pam_unix(sudo:session): session closed for user root May 1 06:55:37 pan sudo[842403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:55:37 pan sudo[842403]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:37 pan sudo[842403]: pam_unix(sudo:session): session closed for user root May 1 06:55:38 pan sudo[842416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=mp.crvitalia.it return_https_redirect_status=1 --output=json' May 1 06:55:38 pan sudo[842416]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:38 pan sudo[842416]: pam_unix(sudo:session): session closed for user root May 1 06:55:38 pan sudo[842452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/mp.crvitalia.it --output=json' May 1 06:55:38 pan sudo[842452]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:38 pan sudo[842452]: pam_unix(sudo:session): session closed for user root May 1 06:55:39 pan sudo[842496]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/mp.crvitalia.it && find /home/bangherangstudio/mp.crvitalia.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:39 pan sudo[842496]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:39 pan sudo[842496]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:39 pan sudo[842500]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/mp.crvitalia.it && find /home/bangherangstudio/mp.crvitalia.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:39 pan sudo[842500]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:39 pan sudo[842500]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:39 pan sudo[842500]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:39 pan sudo[842500]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:39 pan sudo[842500]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:39 pan sudo[842500]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:39 pan sudo[842504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/mp.crvitalia.it && find /home/bangherangstudio/mp.crvitalia.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:39 pan sudo[842504]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:39 pan sudo[842504]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:39 pan sudo[842504]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:39 pan sudo[842504]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:39 pan sudo[842504]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:39 pan sudo[842504]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:39 pan sudo[842508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/mp.crvitalia.it && find /home/bangherangstudio/mp.crvitalia.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:39 pan sudo[842508]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:39 pan sudo[842508]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:39 pan sudo[842508]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:39 pan sudo[842508]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:39 pan sudo[842508]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:39 pan sudo[842508]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:41 pan sudo[842586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/mp.crvitalia.it && find /home/bangherangstudio/mp.crvitalia.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:41 pan sudo[842586]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:41 pan sudo[842586]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:41 pan sudo[842590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/mp.crvitalia.it && find /home/bangherangstudio/mp.crvitalia.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:41 pan sudo[842590]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:41 pan sudo[842590]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:41 pan sudo[842590]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:41 pan sudo[842590]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:41 pan sudo[842590]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:41 pan sudo[842590]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:41 pan sudo[842594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/mp.crvitalia.it && find /home/bangherangstudio/mp.crvitalia.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:41 pan sudo[842594]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:41 pan sudo[842594]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:41 pan sudo[842594]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:41 pan sudo[842594]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:41 pan sudo[842594]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:41 pan sudo[842594]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:41 pan sudo[842598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/mp.crvitalia.it && find /home/bangherangstudio/mp.crvitalia.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:41 pan sudo[842598]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:41 pan sudo[842598]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:41 pan sudo[842598]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:41 pan sudo[842598]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:41 pan sudo[842598]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:41 pan sudo[842598]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:44 pan sudo[842649]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/narbit.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:55:44 pan sudo[842649]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:44 pan sudo[842649]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:44 pan sudo[842654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:55:44 pan sudo[842654]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:44 pan sudo[842654]: pam_unix(sudo:session): session closed for user root May 1 06:55:45 pan sudo[842669]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=narbit.it return_https_redirect_status=1 --output=json' May 1 06:55:45 pan sudo[842669]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:45 pan sudo[842669]: pam_unix(sudo:session): session closed for user root May 1 06:55:45 pan sudo[842704]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/narbit.it --output=json' May 1 06:55:45 pan sudo[842704]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:45 pan sudo[842704]: pam_unix(sudo:session): session closed for user root May 1 06:55:46 pan sudo[842747]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/narbit.it && find /home/bangherangstudio/narbit.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:46 pan sudo[842747]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:46 pan sudo[842747]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:46 pan sudo[842751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/narbit.it && find /home/bangherangstudio/narbit.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm May 1 06:55:46 pan sudo[842751]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm May 1 06:55:46 pan sudo[842751]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm May 1 06:55:46 pan sudo[842751]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm May 1 06:55:46 pan sudo[842751]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:46 pan sudo[842751]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:46 pan sudo[842751]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:46 pan sudo[842755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/narbit.it && find /home/bangherangstudio/narbit.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm May 1 06:55:46 pan sudo[842755]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm May 1 06:55:46 pan sudo[842755]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm May 1 06:55:46 pan sudo[842755]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm May 1 06:55:46 pan sudo[842755]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:46 pan sudo[842755]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:46 pan sudo[842755]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:48 pan sudo[842836]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/narbit.it && find /home/bangherangstudio/narbit.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:48 pan sudo[842836]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:48 pan sudo[842836]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:48 pan sudo[842840]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/narbit.it && find /home/bangherangstudio/narbit.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm May 1 06:55:48 pan sudo[842840]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm May 1 06:55:48 pan sudo[842840]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm May 1 06:55:48 pan sudo[842840]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm May 1 06:55:48 pan sudo[842840]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:48 pan sudo[842840]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:48 pan sudo[842840]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:48 pan sudo[842844]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/narbit.it && find /home/bangherangstudio/narbit.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm May 1 06:55:48 pan sudo[842844]: wp-toolkit : (command continued) 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm May 1 06:55:48 pan sudo[842844]: wp-toolkit : (command continued) 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm May 1 06:55:48 pan sudo[842844]: wp-toolkit : (command continued) 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm May 1 06:55:48 pan sudo[842844]: wp-toolkit : (command continued) 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:48 pan sudo[842844]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:48 pan sudo[842844]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:52 pan sudo[842887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidaevents.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:55:52 pan sudo[842887]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:52 pan sudo[842887]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:52 pan sudo[842892]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:55:52 pan sudo[842892]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:52 pan sudo[842892]: pam_unix(sudo:session): session closed for user root May 1 06:55:52 pan sudo[842906]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=procidaevents.it return_https_redirect_status=1 --output=json' May 1 06:55:52 pan sudo[842906]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:52 pan sudo[842906]: pam_unix(sudo:session): session closed for user root May 1 06:55:53 pan sudo[842941]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/procidaevents.it --output=json' May 1 06:55:53 pan sudo[842941]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:53 pan sudo[842941]: pam_unix(sudo:session): session closed for user root May 1 06:55:54 pan sshd[842964]: error: kex_exchange_identification: Connection closed by remote host May 1 06:55:54 pan sudo[842986]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidaevents.it && find /home/bangherangstudio/procidaevents.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:54 pan sudo[842986]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:54 pan sudo[842986]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:54 pan sudo[842990]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidaevents.it && find /home/bangherangstudio/procidaevents.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:54 pan sudo[842990]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:54 pan sudo[842990]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:54 pan sudo[842990]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:54 pan sudo[842990]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:54 pan sudo[842990]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:54 pan sudo[842990]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:54 pan sudo[842994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidaevents.it && find /home/bangherangstudio/procidaevents.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:55:54 pan sudo[842994]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:55:54 pan sudo[842994]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:55:54 pan sudo[842994]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:55:54 pan sudo[842994]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:54 pan sudo[842994]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:54 pan sudo[842994]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:54 pan sudo[842999]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidaevents.it && find /home/bangherangstudio/procidaevents.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:55:54 pan sudo[842999]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:55:54 pan sudo[842999]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:55:54 pan sudo[842999]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:55:54 pan sudo[842999]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:54 pan sudo[842999]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:54 pan sudo[842999]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:56 pan sudo[843077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidaevents.it && find /home/bangherangstudio/procidaevents.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:56 pan sudo[843077]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:56 pan sudo[843077]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:56 pan sudo[843081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidaevents.it && find /home/bangherangstudio/procidaevents.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:55:56 pan sudo[843081]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:55:56 pan sudo[843081]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:55:56 pan sudo[843081]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:55:56 pan sudo[843081]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:56 pan sudo[843081]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:56 pan sudo[843081]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:56 pan sudo[843085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidaevents.it && find /home/bangherangstudio/procidaevents.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:55:56 pan sudo[843085]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:55:56 pan sudo[843085]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:55:56 pan sudo[843085]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:55:56 pan sudo[843085]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:56 pan sudo[843085]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:56 pan sudo[843085]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:56 pan sudo[843089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/procidaevents.it && find /home/bangherangstudio/procidaevents.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:55:56 pan sudo[843089]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:55:56 pan sudo[843089]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:55:56 pan sudo[843089]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:55:56 pan sudo[843089]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:55:56 pan sudo[843089]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:56 pan sudo[843089]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:58 pan sudo[843135]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/valeriocaprara.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:55:58 pan sudo[843135]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:55:58 pan sudo[843135]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:55:58 pan sudo[843140]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 package_manager_get_package_info package-0=ea-php84 --output=json' May 1 06:55:58 pan sudo[843140]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:59 pan sudo[843140]: pam_unix(sudo:session): session closed for user root May 1 06:55:59 pan sudo[843146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:55:59 pan sudo[843146]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:59 pan sudo[843146]: pam_unix(sudo:session): session closed for user root May 1 06:55:59 pan sudo[843160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=valeriocaprara.it return_https_redirect_status=1 --output=json' May 1 06:55:59 pan sudo[843160]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:55:59 pan sudo[843160]: pam_unix(sudo:session): session closed for user root May 1 06:56:00 pan sudo[843196]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/valeriocaprara.it --output=json' May 1 06:56:00 pan sudo[843196]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:00 pan sudo[843196]: pam_unix(sudo:session): session closed for user root May 1 06:56:01 pan sudo[843251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/valeriocaprara.it && find /home/bangherangstudio/valeriocaprara.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:01 pan sudo[843251]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:01 pan sudo[843251]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:01 pan sudo[843257]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/valeriocaprara.it && find /home/bangherangstudio/valeriocaprara.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:56:01 pan sudo[843257]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:56:01 pan sudo[843257]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:56:01 pan sudo[843257]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:56:01 pan sudo[843257]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:01 pan sudo[843257]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:01 pan sudo[843257]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:01 pan sudo[843262]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/valeriocaprara.it && find /home/bangherangstudio/valeriocaprara.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:56:01 pan sudo[843262]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:56:01 pan sudo[843262]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:56:01 pan sudo[843262]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:56:01 pan sudo[843262]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:01 pan sudo[843262]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:01 pan sudo[843262]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:02 pan sudo[843346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/valeriocaprara.it && find /home/bangherangstudio/valeriocaprara.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:02 pan sudo[843346]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:02 pan sudo[843346]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:02 pan sudo[843350]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/valeriocaprara.it && find /home/bangherangstudio/valeriocaprara.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:56:02 pan sudo[843350]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:56:02 pan sudo[843350]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:56:02 pan sudo[843350]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:56:02 pan sudo[843350]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:02 pan sudo[843350]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:02 pan sudo[843350]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:03 pan sudo[843354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/valeriocaprara.it && find /home/bangherangstudio/valeriocaprara.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' May 1 06:56:03 pan sudo[843354]: wp-toolkit : (command continued) -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' May 1 06:56:03 pan sudo[843354]: wp-toolkit : (command continued) -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' May 1 06:56:03 pan sudo[843354]: wp-toolkit : (command continued) -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' May 1 06:56:03 pan sudo[843354]: wp-toolkit : (command continued) -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:03 pan sudo[843354]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:03 pan sudo[843354]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:03 pan sudo[843403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=vidama.it return_https_redirect_status=1 --output=json' May 1 06:56:03 pan sudo[843403]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:04 pan sudo[843403]: pam_unix(sudo:session): session closed for user root May 1 06:56:04 pan sudo[843415]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/vidama.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:56:04 pan sudo[843415]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:04 pan sudo[843415]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:04 pan sudo[843420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:56:04 pan sudo[843420]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:04 pan sudo[843420]: pam_unix(sudo:session): session closed for user root May 1 06:56:09 pan sudo[843444]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/volkancrosstrain.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:56:09 pan sudo[843444]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:09 pan sudo[843444]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:09 pan sudo[843449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:56:09 pan sudo[843449]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:09 pan sudo[843449]: pam_unix(sudo:session): session closed for user root May 1 06:56:10 pan sudo[843462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=volkancrosstrain.it return_https_redirect_status=1 --output=json' May 1 06:56:10 pan sudo[843462]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:10 pan sudo[843462]: pam_unix(sudo:session): session closed for user root May 1 06:56:10 pan sudo[843498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/volkancrosstrain.it --output=json' May 1 06:56:10 pan sudo[843498]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:10 pan sudo[843498]: pam_unix(sudo:session): session closed for user root May 1 06:56:11 pan sudo[843541]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/volkancrosstrain.it && find /home/bangherangstudio/volkancrosstrain.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:11 pan sudo[843541]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:11 pan sudo[843541]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:11 pan sudo[843545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/volkancrosstrain.it && find /home/bangherangstudio/volkancrosstrain.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:56:11 pan sudo[843545]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:56:11 pan sudo[843545]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:56:11 pan sudo[843545]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:56:11 pan sudo[843545]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:11 pan sudo[843545]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:11 pan sudo[843545]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:11 pan sudo[843549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/volkancrosstrain.it && find /home/bangherangstudio/volkancrosstrain.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:56:11 pan sudo[843549]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:56:11 pan sudo[843549]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:56:11 pan sudo[843549]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:56:11 pan sudo[843549]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:11 pan sudo[843549]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:11 pan sudo[843549]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:13 pan sudo[843628]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/volkancrosstrain.it && find /home/bangherangstudio/volkancrosstrain.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:13 pan sudo[843628]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:13 pan sudo[843628]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:13 pan sudo[843632]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/volkancrosstrain.it && find /home/bangherangstudio/volkancrosstrain.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:56:13 pan sudo[843632]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:56:13 pan sudo[843632]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:56:13 pan sudo[843632]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:56:13 pan sudo[843632]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:13 pan sudo[843632]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:13 pan sudo[843632]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:13 pan sudo[843636]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/volkancrosstrain.it && find /home/bangherangstudio/volkancrosstrain.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 May 1 06:56:13 pan sudo[843636]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 May 1 06:56:13 pan sudo[843636]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 May 1 06:56:13 pan sudo[843636]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 May 1 06:56:13 pan sudo[843636]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:13 pan sudo[843636]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:13 pan sudo[843636]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:14 pan sudo[843687]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=v2.paladeri.it return_https_redirect_status=1 --output=json' May 1 06:56:14 pan sudo[843687]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:14 pan sudo[843687]: pam_unix(sudo:session): session closed for user root May 1 06:56:14 pan sudo[843705]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v2.paladeri.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:56:14 pan sudo[843705]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:15 pan sudo[843705]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:15 pan sudo[843710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:56:15 pan sudo[843710]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:15 pan sudo[843710]: pam_unix(sudo:session): session closed for user root May 1 06:56:15 pan sudo[843734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v2.paladeri.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:56:15 pan sudo[843734]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:15 pan sudo[843734]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:15 pan sudo[843739]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:56:15 pan sudo[843739]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:15 pan sudo[843739]: pam_unix(sudo:session): session closed for user root May 1 06:56:18 pan sudo[843778]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v3.paladeri.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:56:18 pan sudo[843778]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:18 pan sudo[843778]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:18 pan sudo[843783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:56:18 pan sudo[843783]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:18 pan sudo[843783]: pam_unix(sudo:session): session closed for user root May 1 06:56:19 pan sudo[843796]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=v3.paladeri.it return_https_redirect_status=1 --output=json' May 1 06:56:19 pan sudo[843796]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:19 pan sudo[843796]: pam_unix(sudo:session): session closed for user root May 1 06:56:20 pan sudo[843834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/v3.paladeri.it --output=json' May 1 06:56:20 pan sudo[843834]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:20 pan sudo[843834]: pam_unix(sudo:session): session closed for user root May 1 06:56:20 pan sudo[843891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v3.paladeri.it && find /home/bangherangstudio/v3.paladeri.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:20 pan sudo[843891]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:20 pan sudo[843891]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:20 pan sudo[843895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v3.paladeri.it && find /home/bangherangstudio/v3.paladeri.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:56:20 pan sudo[843895]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:56:20 pan sudo[843895]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:56:20 pan sudo[843895]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:56:20 pan sudo[843895]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:20 pan sudo[843895]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:20 pan sudo[843895]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:20 pan sudo[843899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v3.paladeri.it && find /home/bangherangstudio/v3.paladeri.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:56:20 pan sudo[843899]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:56:20 pan sudo[843899]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:56:20 pan sudo[843899]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:56:20 pan sudo[843899]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:20 pan sudo[843899]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:20 pan sudo[843899]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:20 pan sudo[843903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v3.paladeri.it && find /home/bangherangstudio/v3.paladeri.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:56:20 pan sudo[843903]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:56:20 pan sudo[843903]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:56:20 pan sudo[843903]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:56:20 pan sudo[843903]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:20 pan sudo[843903]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:20 pan sudo[843903]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:22 pan sudo[843981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v3.paladeri.it && find /home/bangherangstudio/v3.paladeri.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:22 pan sudo[843981]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:22 pan sudo[843981]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:22 pan sudo[843985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v3.paladeri.it && find /home/bangherangstudio/v3.paladeri.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:56:22 pan sudo[843985]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:56:22 pan sudo[843985]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:56:22 pan sudo[843985]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:56:22 pan sudo[843985]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:22 pan sudo[843985]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:22 pan sudo[843985]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:22 pan sudo[843989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v3.paladeri.it && find /home/bangherangstudio/v3.paladeri.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:56:22 pan sudo[843989]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:56:22 pan sudo[843989]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:56:22 pan sudo[843989]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:56:22 pan sudo[843989]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:22 pan sudo[843989]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:22 pan sudo[843989]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:22 pan sudo[843994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/v3.paladeri.it && find /home/bangherangstudio/v3.paladeri.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' -o \'(\' -perm 011 \')\' -o May 1 06:56:22 pan sudo[843994]: wp-toolkit : (command continued) \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' -o \'(\' -perm 244 \')\' -o May 1 06:56:22 pan sudo[843994]: wp-toolkit : (command continued) \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' -o \'(\' -perm 455 \')\' -o May 1 06:56:22 pan sudo[843994]: wp-toolkit : (command continued) \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' -o \'(\' -perm 710 \')\' -o May 1 06:56:22 pan sudo[843994]: wp-toolkit : (command continued) \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:22 pan sudo[843994]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:22 pan sudo[843994]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:26 pan sudo[844053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/camiceriarepubblicamarinara.it && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' May 1 06:56:26 pan sudo[844053]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:27 pan sudo[844053]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:27 pan sudo[844058]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat May 1 06:56:27 pan sudo[844058]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:27 pan sudo[844058]: pam_unix(sudo:session): session closed for user root May 1 06:56:27 pan sudo[844073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=camiceriarepubblicamarinara.it return_https_redirect_status=1 --output=json' May 1 06:56:27 pan sudo[844073]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:27 pan sudo[844073]: pam_unix(sudo:session): session closed for user root May 1 06:56:28 pan sudo[844109]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DirectoryPrivacy is_directory_protected dir=/home/bangherangstudio/camiceriarepubblicamarinara.it --output=json' May 1 06:56:28 pan sudo[844109]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:28 pan sudo[844109]: pam_unix(sudo:session): session closed for user root May 1 06:56:29 pan sudo[844152]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/camiceriarepubblicamarinara.it && find /home/bangherangstudio/camiceriarepubblicamarinara.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:29 pan sudo[844152]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:29 pan sudo[844152]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:29 pan sudo[844156]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/camiceriarepubblicamarinara.it && find /home/bangherangstudio/camiceriarepubblicamarinara.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' May 1 06:56:29 pan sudo[844156]: wp-toolkit : (command continued) -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' May 1 06:56:29 pan sudo[844156]: wp-toolkit : (command continued) -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' May 1 06:56:29 pan sudo[844156]: wp-toolkit : (command continued) -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' May 1 06:56:29 pan sudo[844156]: wp-toolkit : (command continued) -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:29 pan sudo[844156]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:29 pan sudo[844156]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:29 pan sudo[844160]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/camiceriarepubblicamarinara.it && find /home/bangherangstudio/camiceriarepubblicamarinara.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 May 1 06:56:29 pan sudo[844160]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 May 1 06:56:29 pan sudo[844160]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 May 1 06:56:29 pan sudo[844160]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 May 1 06:56:29 pan sudo[844160]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:29 pan sudo[844160]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:29 pan sudo[844160]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:29 pan sudo[844164]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/camiceriarepubblicamarinara.it && find /home/bangherangstudio/camiceriarepubblicamarinara.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 May 1 06:56:29 pan sudo[844164]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 May 1 06:56:29 pan sudo[844164]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 May 1 06:56:29 pan sudo[844164]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 May 1 06:56:29 pan sudo[844164]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:29 pan sudo[844164]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:29 pan sudo[844164]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:30 pan sudo[844243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/camiceriarepubblicamarinara.it && find /home/bangherangstudio/camiceriarepubblicamarinara.it -maxdepth 1 \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:30 pan sudo[844243]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:30 pan sudo[844243]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:30 pan sudo[844247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/camiceriarepubblicamarinara.it && find /home/bangherangstudio/camiceriarepubblicamarinara.it/wp-admin \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 \')\' May 1 06:56:30 pan sudo[844247]: wp-toolkit : (command continued) -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 \')\' May 1 06:56:30 pan sudo[844247]: wp-toolkit : (command continued) -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 \')\' May 1 06:56:30 pan sudo[844247]: wp-toolkit : (command continued) -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 \')\' May 1 06:56:30 pan sudo[844247]: wp-toolkit : (command continued) -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:30 pan sudo[844247]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:30 pan sudo[844247]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:30 pan sudo[844251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/camiceriarepubblicamarinara.it && find /home/bangherangstudio/camiceriarepubblicamarinara.it/wp-content \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 May 1 06:56:30 pan sudo[844251]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 May 1 06:56:30 pan sudo[844251]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 May 1 06:56:30 pan sudo[844251]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 May 1 06:56:30 pan sudo[844251]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:30 pan sudo[844251]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:30 pan sudo[844251]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:30 pan sudo[844256]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/sh -c 'cd /home/bangherangstudio/camiceriarepubblicamarinara.it && find /home/bangherangstudio/camiceriarepubblicamarinara.it/wp-includes \'(\' \'(\' \'(\' \'(\' -type f \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 644 \')\' \')\' \')\' \')\' \')\' -o \'(\' \'(\' \'(\' -type d \')\' \'(\' -user bangherangstudio \')\' \'(\' \'!\' \'(\' \'(\' -perm 000 \')\' -o \'(\' -perm 001 \')\' -o \'(\' -perm 004 \')\' -o \'(\' -perm 005 \')\' -o \'(\' -perm 010 May 1 06:56:30 pan sudo[844256]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 011 \')\' -o \'(\' -perm 014 \')\' -o \'(\' -perm 015 \')\' -o \'(\' -perm 040 \')\' -o \'(\' -perm 041 \')\' -o \'(\' -perm 044 \')\' -o \'(\' -perm 045 \')\' -o \'(\' -perm 050 \')\' -o \'(\' -perm 051 \')\' -o \'(\' -perm 054 \')\' -o \'(\' -perm 055 \')\' -o \'(\' -perm 100 \')\' -o \'(\' -perm 101 \')\' -o \'(\' -perm 104 \')\' -o \'(\' -perm 105 \')\' -o \'(\' -perm 110 \')\' -o \'(\' -perm 111 \')\' -o \'(\' -perm 114 \')\' -o \'(\' -perm 115 \')\' -o \'(\' -perm 140 \')\' -o \'(\' -perm 141 \')\' -o \'(\' -perm 144 \')\' -o \'(\' -perm 145 \')\' -o \'(\' -perm 150 \')\' -o \'(\' -perm 151 \')\' -o \'(\' -perm 154 \')\' -o \'(\' -perm 155 \')\' -o \'(\' -perm 200 \')\' -o \'(\' -perm 201 \')\' -o \'(\' -perm 204 \')\' -o \'(\' -perm 205 \')\' -o \'(\' -perm 210 \')\' -o \'(\' -perm 211 \')\' -o \'(\' -perm 214 \')\' -o \'(\' -perm 215 \')\' -o \'(\' -perm 240 \')\' -o \'(\' -perm 241 May 1 06:56:30 pan sudo[844256]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 244 \')\' -o \'(\' -perm 245 \')\' -o \'(\' -perm 250 \')\' -o \'(\' -perm 251 \')\' -o \'(\' -perm 254 \')\' -o \'(\' -perm 255 \')\' -o \'(\' -perm 300 \')\' -o \'(\' -perm 301 \')\' -o \'(\' -perm 304 \')\' -o \'(\' -perm 305 \')\' -o \'(\' -perm 310 \')\' -o \'(\' -perm 311 \')\' -o \'(\' -perm 314 \')\' -o \'(\' -perm 315 \')\' -o \'(\' -perm 340 \')\' -o \'(\' -perm 341 \')\' -o \'(\' -perm 344 \')\' -o \'(\' -perm 345 \')\' -o \'(\' -perm 350 \')\' -o \'(\' -perm 351 \')\' -o \'(\' -perm 354 \')\' -o \'(\' -perm 355 \')\' -o \'(\' -perm 400 \')\' -o \'(\' -perm 401 \')\' -o \'(\' -perm 404 \')\' -o \'(\' -perm 405 \')\' -o \'(\' -perm 410 \')\' -o \'(\' -perm 411 \')\' -o \'(\' -perm 414 \')\' -o \'(\' -perm 415 \')\' -o \'(\' -perm 440 \')\' -o \'(\' -perm 441 \')\' -o \'(\' -perm 444 \')\' -o \'(\' -perm 445 \')\' -o \'(\' -perm 450 \')\' -o \'(\' -perm 451 \')\' -o \'(\' -perm 454 May 1 06:56:30 pan sudo[844256]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 455 \')\' -o \'(\' -perm 500 \')\' -o \'(\' -perm 501 \')\' -o \'(\' -perm 504 \')\' -o \'(\' -perm 505 \')\' -o \'(\' -perm 510 \')\' -o \'(\' -perm 511 \')\' -o \'(\' -perm 514 \')\' -o \'(\' -perm 515 \')\' -o \'(\' -perm 540 \')\' -o \'(\' -perm 541 \')\' -o \'(\' -perm 544 \')\' -o \'(\' -perm 545 \')\' -o \'(\' -perm 550 \')\' -o \'(\' -perm 551 \')\' -o \'(\' -perm 554 \')\' -o \'(\' -perm 555 \')\' -o \'(\' -perm 600 \')\' -o \'(\' -perm 601 \')\' -o \'(\' -perm 604 \')\' -o \'(\' -perm 605 \')\' -o \'(\' -perm 610 \')\' -o \'(\' -perm 611 \')\' -o \'(\' -perm 614 \')\' -o \'(\' -perm 615 \')\' -o \'(\' -perm 640 \')\' -o \'(\' -perm 641 \')\' -o \'(\' -perm 644 \')\' -o \'(\' -perm 645 \')\' -o \'(\' -perm 650 \')\' -o \'(\' -perm 651 \')\' -o \'(\' -perm 654 \')\' -o \'(\' -perm 655 \')\' -o \'(\' -perm 700 \')\' -o \'(\' -perm 701 \')\' -o \'(\' -perm 704 \')\' -o \'(\' -perm 705 May 1 06:56:30 pan sudo[844256]: wp-toolkit : (command continued) \')\' -o \'(\' -perm 710 \')\' -o \'(\' -perm 711 \')\' -o \'(\' -perm 714 \')\' -o \'(\' -perm 715 \')\' -o \'(\' -perm 740 \')\' -o \'(\' -perm 741 \')\' -o \'(\' -perm 744 \')\' -o \'(\' -perm 745 \')\' -o \'(\' -perm 750 \')\' -o \'(\' -perm 751 \')\' -o \'(\' -perm 754 \')\' -o \'(\' -perm 755 \')\' \')\' \')\' \')\' \')\' \')\' -print -quit' May 1 06:56:30 pan sudo[844256]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 06:56:30 pan sudo[844256]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 06:56:31 pan sudo[844287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio WpToolkitNotification send_admin_auto_updates_notification \'available_updates_text=

Updates are available for the following items:

\' \'available_updates_list=1. Plugin "Elementor" on Centro di Riabilitazone - Villa Silvia - Roccapiemonte(SA) (https://www.villasilvia.it). Installed version: 3.35.6. Available version: 4.0.5.

2. Plugin "Elementor" on Aria - Associazione Riabilitazione e Arte - Aps (https://www.ariaaps.it). Installed version: 3.35.6. Available version: 4.0.5.

3. Plugin "Code Snippets" on Trattoria del Golfo - Napoli (https://trattoriadelgolfo.net). Installed version: 3.9.5. Available version: 3.9.6.

4. Plugin "Elementor" on Trattoria del Golfo - Napoli (https://trattoriadelgolfo.net). Installed version: 3.35.6. Available version: 4.0.5.

5. Plugin May 1 06:56:31 pan sudo[844287]: wp-toolkit : (command continued) "Elementor" on Michele Russo Immobilare - Dream House - Caserta (https://michelerussoimmobiliare.it). Installed version: 3.35.6. Available version: 4.0.5.

6. Plugin "Code Snippets" on Volkan Crosstrain - Napoli (https://www.volkancrosstrain.it). Installed version: 3.9.5. Available version: 3.9.6.

\' installed_updates_text= installed_updates_list= \'failure_updates_text=Updates were not installed for the following items:

\' \'failure_updates_list=1. Website "/home/bangherangstudio/ortart.villasilvia.it" (https://ortart.villasilvia.it): Failed to reset cache for the instance #2: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bangherangstudio/ortart.villasilvia.it/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012

2. Website May 1 06:56:31 pan sudo[844287]: wp-toolkit : (command continued) "/home/bangherangstudio/caffediportacastello.it" (http://caffediportacastello.it): Failed to reset cache for the instance #15: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bangherangstudio/caffediportacastello.it/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012

3. Website "/home/bangherangstudio/parquettistanapoli.it" (http://parquettistanapoli.it): Failed to reset cache for the instance #16: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bangherangstudio/parquettistanapoli.it/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012

4. Website "/home/bangherangstudio/fisiosteel.it" (http://fisiosteel.it): Failed to reset cache for the instance #26: Error: This does not May 1 06:56:31 pan sudo[844287]: wp-toolkit : (command continued) seem to be a WordPress installation.#012The used path is: /home/bangherangstudio/fisiosteel.it/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012

5. Website "/home/bangherangstudio/vidama.it" (http://vidama.it): Failed to reset cache for the instance #34: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bangherangstudio/vidama.it/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012

6. Website "/home/bangherangstudio/v2.paladeri.it" (http://v2.paladeri.it): Failed to reset cache for the instance #39: Error: \'"\'"\'wp-config.php\'"\'"\' not found.#012Either create one manually or use `wp config create`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012

7. Website May 1 06:56:31 pan sudo[844287]: wp-toolkit : (command continued) "/home/bangherangstudio/v2.paladeri.it/wordpress" (http://v2.paladeri.it/wordpress): Failed to reset cache for the instance #40: [error]InvalidWorkingDir: chdir /home/bangherangstudio/v2.paladeri.it/wordpress: no such file or directory[/error]#012

\' --output=json' May 1 06:56:31 pan sudo[844287]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:31 pan sudo[844287]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/hooks May 1 06:56:40 pan sudo[844775]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844775]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844779]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'httpd -v' May 1 06:56:40 pan sudo[844779]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844779]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844783]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/ilgiardinodisilvia.villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844783]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844783]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844787]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/ilgiardinodisilvia.villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844787]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844787]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844791]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/ilgiardinodisilvia.villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844791]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844791]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844795]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/ilgiardinodisilvia.villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844795]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844795]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844799]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/scuola.villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844799]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844799]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844803]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/scuola.villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844803]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844803]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844807]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/scuola.villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844807]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844807]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844811]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/scuola.villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844811]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844811]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844815]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844815]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844819]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844819]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844819]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844823]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844823]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844823]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844827]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/villasilvia.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844827]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844827]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844831]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/villasilvia.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844831]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844831]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844835]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/villasilvia.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844835]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844835]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844839]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/villasilvia.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844839]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844839]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844843]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/villasilvia.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844843]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844843]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844847]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/ariaonlus.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844847]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844847]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844851]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/ariaonlus.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844851]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844851]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844855]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/ariaonlus.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844855]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844855]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/ariaonlus.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844859]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844859]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844863]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/ariaonlus.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844863]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844863]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/ariaonlus.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844867]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844867]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/ariaonlus.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844871]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844871]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/ariaonlus.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844875]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844875]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844879]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/ariaonlus.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844879]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844879]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844883]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/ariaonlus.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844883]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844883]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844887]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/ariaonlus.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844887]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844887]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/ariaonlus.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844891]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844891]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/press.gialauyacht.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844895]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844895]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844899]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/press.gialauyacht.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844899]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844899]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844903]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/press.gialauyacht.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844903]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844903]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/press.gialauyacht.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844907]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844907]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844911]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/press.gialauyacht.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844911]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844911]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844915]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/press.gialauyacht.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844915]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844915]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844919]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/ariaaps.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844919]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844919]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844923]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/ariaaps.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844923]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844923]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844927]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/ariaaps.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844927]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844927]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844931]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/ariaaps.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844931]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844931]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844936]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/ariaaps.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844936]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844936]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844942]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/ariaaps.it/wp-toolkit.conf May 1 06:56:40 pan sudo[844942]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844942]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844948]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/ariaaps.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844948]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844948]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844952]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/ariaaps.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844952]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844952]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844956]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/ariaaps.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844956]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844956]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844960]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/ariaaps.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844960]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844960]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844964]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/ariaaps.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844964]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844964]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/ariaaps.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:40 pan sudo[844968]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844968]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844972]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/trattoriadelgolfo.net/wp-toolkit.conf May 1 06:56:40 pan sudo[844972]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844972]: pam_unix(sudo:session): session closed for user root May 1 06:56:40 pan sudo[844976]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/trattoriadelgolfo.net/wp-toolkit.conf May 1 06:56:40 pan sudo[844976]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:40 pan sudo[844976]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[844980]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/trattoriadelgolfo.net/wp-toolkit.conf May 1 06:56:41 pan sudo[844980]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[844980]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[844984]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/trattoriadelgolfo.net/wp-toolkit.conf May 1 06:56:41 pan sudo[844984]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[844984]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[844989]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/trattoriadelgolfo.net/wp-toolkit.conf May 1 06:56:41 pan sudo[844989]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[844989]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[844993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/trattoriadelgolfo.net/wp-toolkit.conf May 1 06:56:41 pan sudo[844993]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[844993]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[844997]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/trattoriadelgolfo.net.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[844997]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[844997]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845001]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/trattoriadelgolfo.net.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845001]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845001]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845005]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/trattoriadelgolfo.net.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845005]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845005]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845009]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/trattoriadelgolfo.net.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845009]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845009]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845013]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/trattoriadelgolfo.net.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845013]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845013]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845017]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/trattoriadelgolfo.net.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845017]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845017]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845021]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/procidavelacup.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845021]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845021]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845025]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/procidavelacup.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845025]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845025]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845029]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/procidavelacup.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845029]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845029]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845033]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/procidavelacup.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845033]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845033]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845037]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/procidavelacup.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845037]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845037]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845041]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/procidavelacup.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845041]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845041]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845045]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/procidavelacup.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845045]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845045]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845049]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/procidavelacup.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845049]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845049]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845053]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/procidavelacup.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845053]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845053]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845057]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/procidavelacup.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845057]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845057]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845061]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/procidavelacup.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845061]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845061]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845065]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/procidavelacup.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845065]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845065]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845069]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/nutrizionistaragosta.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845069]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845069]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845073]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/nutrizionistaragosta.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845073]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845073]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845077]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/nutrizionistaragosta.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845077]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845077]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845081]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/nutrizionistaragosta.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845081]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845081]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845085]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/nutrizionistaragosta.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845085]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845085]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845089]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/nutrizionistaragosta.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845089]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845089]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845093]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/nutrizionistaragosta.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845093]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845093]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845098]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/nutrizionistaragosta.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845098]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845098]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845102]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/nutrizionistaragosta.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845102]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845102]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845106]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/nutrizionistaragosta.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845106]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845106]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845110]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/nutrizionistaragosta.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845110]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845110]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845114]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/nutrizionistaragosta.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845114]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845114]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845118]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/michelerussoimmobiliare.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845118]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845118]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845122]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/michelerussoimmobiliare.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845122]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845122]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845126]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/michelerussoimmobiliare.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845126]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845126]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845130]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/michelerussoimmobiliare.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845130]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845130]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845134]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/michelerussoimmobiliare.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845134]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845134]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845138]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/michelerussoimmobiliare.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845138]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845138]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845142]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/michelerussoimmobiliare.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845142]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845142]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845146]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/michelerussoimmobiliare.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845146]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845146]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845150]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/michelerussoimmobiliare.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845150]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845150]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845154]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/michelerussoimmobiliare.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845154]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845154]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845158]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/michelerussoimmobiliare.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845158]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845158]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845162]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/michelerussoimmobiliare.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845162]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845162]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/parquettistanapoli.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845166]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845166]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845170]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/parquettistanapoli.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845170]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845170]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845174]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/parquettistanapoli.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845174]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845174]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845179]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/parquettistanapoli.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845179]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845179]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845183]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/parquettistanapoli.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845183]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845183]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/parquettistanapoli.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845187]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845187]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/parquettistanapoli.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845191]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845191]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/parquettistanapoli.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845195]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845195]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/parquettistanapoli.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845199]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845199]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845203]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/parquettistanapoli.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845203]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845203]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/parquettistanapoli.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845207]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845207]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845211]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/parquettistanapoli.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845211]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845211]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/impiantipinna.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845215]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845215]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845219]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/impiantipinna.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845219]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845219]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/impiantipinna.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845223]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845223]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845227]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/impiantipinna.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845227]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845227]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845231]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/impiantipinna.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845231]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845231]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845235]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/impiantipinna.it/wp-toolkit.conf May 1 06:56:41 pan sudo[845235]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845235]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845239]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/impiantipinna.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845239]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845239]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845243]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/impiantipinna.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845243]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845243]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845247]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/impiantipinna.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845247]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845247]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845251]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/impiantipinna.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845251]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845251]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/impiantipinna.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845255]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845255]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845259]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/impiantipinna.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845259]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845259]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845263]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/2025finneuropeans.org/wp-toolkit.conf May 1 06:56:41 pan sudo[845263]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845263]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845267]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/2025finneuropeans.org/wp-toolkit.conf May 1 06:56:41 pan sudo[845267]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845267]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845271]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/2025finneuropeans.org/wp-toolkit.conf May 1 06:56:41 pan sudo[845271]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845271]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/2025finneuropeans.org/wp-toolkit.conf May 1 06:56:41 pan sudo[845275]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845275]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845279]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/2025finneuropeans.org/wp-toolkit.conf May 1 06:56:41 pan sudo[845279]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845279]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845283]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/2025finneuropeans.org/wp-toolkit.conf May 1 06:56:41 pan sudo[845283]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845283]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845287]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/2025finneuropeans.org.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845287]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845287]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/2025finneuropeans.org.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845291]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845291]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845295]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/2025finneuropeans.org.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845295]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845295]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845299]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/2025finneuropeans.org.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845299]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:41 pan sudo[845299]: pam_unix(sudo:session): session closed for user root May 1 06:56:41 pan sudo[845303]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/2025finneuropeans.org.bangherangstudio.com/wp-toolkit.conf May 1 06:56:41 pan sudo[845303]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845303]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/2025finneuropeans.org.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845307]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845307]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845311]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/pensaunpo.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845311]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845311]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845315]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/pensaunpo.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845315]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845315]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845319]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/pensaunpo.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845319]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845319]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845323]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/pensaunpo.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845323]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845323]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845328]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/pensaunpo.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845328]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845328]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845332]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/pensaunpo.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845332]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845332]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845336]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/pensaunpo.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845336]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845336]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845340]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/pensaunpo.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845340]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845340]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845344]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/pensaunpo.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845344]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845344]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845348]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/pensaunpo.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845348]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845348]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845354]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/pensaunpo.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845354]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845354]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/pensaunpo.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845358]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845358]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845362]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/seaoffice.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845362]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845362]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845366]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/seaoffice.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845366]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845366]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845370]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/seaoffice.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845370]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845370]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/seaoffice.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845374]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845374]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845378]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/seaoffice.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845378]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845378]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845382]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/seaoffice.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845382]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845382]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845386]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/seaoffice.com.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845386]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845386]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845391]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/seaoffice.com.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845391]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845391]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/seaoffice.com.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845395]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845395]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845399]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/seaoffice.com.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845399]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845399]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845403]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/seaoffice.com.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845403]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845403]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845407]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/seaoffice.com.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845407]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845407]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845411]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/fondazionemassimoleone.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845411]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845411]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845417]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/fondazionemassimoleone.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845417]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845417]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845421]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/fondazionemassimoleone.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845421]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845421]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845425]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/fondazionemassimoleone.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845425]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845425]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/fondazionemassimoleone.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845429]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845429]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845433]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/fondazionemassimoleone.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845433]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845433]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845437]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/fondazionemassimoleone.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845437]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845437]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845441]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/fondazionemassimoleone.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845441]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845441]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/fondazionemassimoleone.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845445]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845445]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845449]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/fondazionemassimoleone.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845449]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845449]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845453]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/fondazionemassimoleone.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845453]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845453]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/fondazionemassimoleone.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845457]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845457]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845461]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/bbanticacapri.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845461]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845461]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845465]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/bbanticacapri.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845465]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845465]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845469]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/bbanticacapri.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845469]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845469]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845474]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/bbanticacapri.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845474]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845474]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845478]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/bbanticacapri.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845478]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845478]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845482]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/bbanticacapri.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845482]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845482]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845486]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/bbanticacapri.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845486]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845486]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845490]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/bbanticacapri.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845490]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845490]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845494]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/covielloshowroom.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845494]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845494]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845498]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/covielloshowroom.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845498]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845498]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845502]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/covielloshowroom.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845502]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845502]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845506]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/covielloshowroom.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845506]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845506]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845510]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/covielloshowroom.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845510]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845510]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845514]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/covielloshowroom.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845514]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845514]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845518]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/covielloshowroom.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845518]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845518]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845522]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/covielloshowroom.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845522]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845522]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845526]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/kuluridis.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845526]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845526]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845530]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/kuluridis.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845530]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845530]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845534]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/kuluridis.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845534]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845534]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845538]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/kuluridis.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845538]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845538]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/kuluridis.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845542]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845542]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845546]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/kuluridis.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845546]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845546]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845550]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/kuluridis.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845550]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845550]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/kuluridis.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845554]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845554]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845558]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/mp.crvitalia.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845558]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845558]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845562]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/mp.crvitalia.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845562]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845562]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/mp.crvitalia.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845566]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845566]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845570]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/mp.crvitalia.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845570]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845570]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845574]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/narbit.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845574]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845574]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845578]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/narbit.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845578]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845578]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845582]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/narbit.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845582]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845582]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845586]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/narbit.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845586]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845586]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845590]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/narbit.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845590]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845590]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845594]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/narbit.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845594]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845594]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845598]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/narbit.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845598]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845598]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845602]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/narbit.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:42 pan sudo[845602]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845602]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845606]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/procidaevents.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845606]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845606]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845610]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/procidaevents.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845610]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845610]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845614]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/procidaevents.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845614]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845614]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845618]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/procidaevents.it/wp-toolkit.conf May 1 06:56:42 pan sudo[845618]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:42 pan sudo[845618]: pam_unix(sudo:session): session closed for user root May 1 06:56:42 pan sudo[845622]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/procidaevents.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845622]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845622]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845626]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/procidaevents.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845626]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845626]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845630]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/procidaevents.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845630]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845630]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845634]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/procidaevents.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845634]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845634]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845638]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/valeriocaprara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845638]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845638]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845642]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/valeriocaprara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845642]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845642]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845646]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/valeriocaprara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845646]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845646]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845650]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/valeriocaprara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845650]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845650]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845654]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/valeriocaprara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845654]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845654]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845658]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/valeriocaprara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845658]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845658]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845662]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/valeriocaprara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845662]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845662]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845666]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/valeriocaprara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845666]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845666]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845670]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/volkancrosstrain.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845670]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845670]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845674]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/volkancrosstrain.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845674]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845674]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845678]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/volkancrosstrain.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845678]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845678]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845682]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/volkancrosstrain.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845682]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845682]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845686]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/volkancrosstrain.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845686]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845686]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845690]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/volkancrosstrain.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845690]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845690]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845694]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/volkancrosstrain.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845694]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845694]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845698]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/volkancrosstrain.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845698]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845698]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845702]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/v3.paladeri.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845702]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845702]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845706]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/v3.paladeri.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845706]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845706]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845710]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/v3.paladeri.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845710]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845710]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/v3.paladeri.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845714]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845714]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845718]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/v3.paladeri.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845718]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845718]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845722]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/v3.paladeri.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845722]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845722]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845726]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/camiceriarepubblicamarinara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845726]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845726]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845730]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/camiceriarepubblicamarinara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845730]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845730]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845734]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/camiceriarepubblicamarinara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845734]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845734]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845738]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/camiceriarepubblicamarinara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845738]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845738]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845742]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/camiceriarepubblicamarinara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845742]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845742]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845746]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/camiceriarepubblicamarinara.it/wp-toolkit.conf May 1 06:56:43 pan sudo[845746]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845746]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845750]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/camiceriarepubblicamarinara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845750]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845750]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845754]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/bangherangstudio/camiceriarepubblicamarinara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845754]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845754]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845758]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/camiceriarepubblicamarinara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845758]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845758]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845762]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/bangherangstudio/camiceriarepubblicamarinara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845762]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845762]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845766]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/bangherangstudio/camiceriarepubblicamarinara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845766]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845766]: pam_unix(sudo:session): session closed for user root May 1 06:56:43 pan sudo[845770]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/bangherangstudio/camiceriarepubblicamarinara.it.bangherangstudio.com/wp-toolkit.conf May 1 06:56:43 pan sudo[845770]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:43 pan sudo[845770]: pam_unix(sudo:session): session closed for user root May 1 06:56:44 pan sudo[845781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 06:56:44 pan sudo[845781]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 06:56:44 pan sudo[845781]: pam_unix(sudo:session): session closed for user root May 1 06:57:01 pan systemd[845818]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:58:01 pan systemd[845928]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 06:59:01 pan systemd[846024]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 06:59:01 pan systemd[846029]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:00:01 pan systemd[846332]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:00:01 pan systemd[846346]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:00:01 pan systemd[846351]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:01:01 pan systemd[847205]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:02:01 pan systemd[847302]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:03:01 pan systemd[847403]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:04:01 pan systemd[847530]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:04:01 pan systemd[847535]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:05:01 pan systemd[847826]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:05:01 pan systemd[847840]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:05:01 pan systemd[847848]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:06:01 pan systemd[848643]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:07:01 pan systemd[848724]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:07:19 pan sshd[848992]: error: kex_exchange_identification: Connection closed by remote host May 1 07:08:01 pan systemd[849051]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:09:01 pan systemd[849223]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:09:01 pan systemd[849227]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:10:01 pan systemd[849559]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:10:01 pan systemd[849575]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:10:01 pan systemd[849580]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:11:01 pan systemd[850364]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:12:01 pan systemd[850465]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:13:01 pan systemd[850608]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:14:01 pan systemd[850785]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:14:01 pan systemd[850789]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:15:01 pan systemd[851119]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:15:01 pan systemd[851133]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:15:01 pan systemd[851139]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:16:01 pan systemd[851954]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:17:01 pan systemd[852065]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:18:01 pan systemd[852196]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:19:01 pan systemd[852308]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:20:01 pan systemd[852619]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:20:01 pan systemd[852631]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:20:01 pan systemd[852639]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:20:48 pan sshd[853425]: error: kex_exchange_identification: Connection closed by remote host May 1 07:20:48 pan unix_chkpwd[853428]: password check failed for user (root) May 1 07:20:48 pan sshd[853426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.11.21.145 user=root May 1 07:20:49 pan sshd[853426]: Failed password for root from 141.11.21.145 port 64814 ssh2 May 1 07:20:50 pan sshd[853426]: Connection closed by authenticating user root 141.11.21.145 port 64814 [preauth] May 1 07:21:01 pan systemd[853470]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:21:34 pan sshd[853526]: Invalid user pensaunpo from 213.209.159.227 port 53438 May 1 07:21:34 pan sshd[853526]: pam_unix(sshd:auth): check pass; user unknown May 1 07:21:34 pan sshd[853526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.227 May 1 07:21:36 pan sshd[853526]: Failed password for invalid user pensaunpo from 213.209.159.227 port 53438 ssh2 May 1 07:21:37 pan sshd[853526]: Connection closed by invalid user pensaunpo 213.209.159.227 port 53438 [preauth] May 1 07:22:01 pan systemd[853569]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:23:01 pan systemd[853901]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:24:01 pan systemd[854004]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:25:01 pan systemd[854339]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:25:01 pan systemd[854353]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:25:01 pan systemd[854362]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:26:01 pan systemd[855156]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:27:01 pan systemd[855270]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:28:01 pan systemd[855375]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:29:01 pan systemd[855481]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:29:01 pan systemd[855486]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:30:01 pan systemd[855677]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:30:01 pan systemd[855691]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:30:01 pan systemd[855697]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:31:01 pan systemd[856625]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:32:01 pan systemd[856726]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:32:34 pan sshd[856782]: Invalid user pensaunpo from 213.209.159.225 port 38550 May 1 07:32:34 pan sshd[856782]: pam_unix(sshd:auth): check pass; user unknown May 1 07:32:34 pan sshd[856782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.225 May 1 07:32:36 pan sshd[856782]: Failed password for invalid user pensaunpo from 213.209.159.225 port 38550 ssh2 May 1 07:32:37 pan sshd[856782]: Connection closed by invalid user pensaunpo 213.209.159.225 port 38550 [preauth] May 1 07:33:01 pan systemd[856820]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:34:01 pan systemd[856923]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:34:17 pan sshd[856971]: error: kex_exchange_identification: read: Connection reset by peer May 1 07:34:57 pan sshd[857016]: Connection closed by 45.79.128.205 port 29468 [preauth] May 1 07:34:58 pan sshd[857019]: error: kex_exchange_identification: read: Connection reset by peer May 1 07:35:01 pan sshd[857021]: Connection closed by 45.79.128.205 port 11046 [preauth] May 1 07:35:01 pan systemd[857096]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:35:01 pan systemd[857107]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:35:01 pan systemd[857117]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:36:01 pan systemd[858057]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:37:01 pan systemd[858157]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:38:01 pan systemd[858488]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:39:01 pan systemd[858581]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:39:01 pan systemd[858586]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:40:01 pan systemd[858766]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:40:01 pan systemd[858777]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:40:01 pan systemd[858787]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:41:01 pan systemd[859716]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:42:01 pan systemd[859838]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:42:39 pan sshd[859902]: error: kex_exchange_identification: read: Connection reset by peer May 1 07:43:01 pan systemd[859943]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:44:01 pan systemd[860060]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:44:01 pan systemd[860064]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:45:01 pan systemd[860302]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:45:01 pan systemd[860316]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:45:01 pan systemd[860325]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:45:43 pan sshd[861082]: Invalid user teamspeak-server from 125.247.116.158 port 34084 May 1 07:45:43 pan sshd[861082]: pam_unix(sshd:auth): check pass; user unknown May 1 07:45:43 pan sshd[861082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.247.116.158 May 1 07:45:46 pan sshd[861082]: Failed password for invalid user teamspeak-server from 125.247.116.158 port 34084 ssh2 May 1 07:45:47 pan sshd[861082]: Received disconnect from 125.247.116.158 port 34084:11: Bye Bye [preauth] May 1 07:45:47 pan sshd[861082]: Disconnected from invalid user teamspeak-server 125.247.116.158 port 34084 [preauth] May 1 07:46:01 pan systemd[861261]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:46:01 pan sshd[861282]: error: kex_exchange_identification: Connection closed by remote host May 1 07:46:52 pan sshd[861341]: Invalid user user from 125.247.116.158 port 39804 May 1 07:46:52 pan sshd[861341]: pam_unix(sshd:auth): check pass; user unknown May 1 07:46:52 pan sshd[861341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.247.116.158 May 1 07:46:55 pan sshd[861341]: Failed password for invalid user user from 125.247.116.158 port 39804 ssh2 May 1 07:46:56 pan sshd[861341]: Received disconnect from 125.247.116.158 port 39804:11: Bye Bye [preauth] May 1 07:46:56 pan sshd[861341]: Disconnected from invalid user user 125.247.116.158 port 39804 [preauth] May 1 07:47:01 pan systemd[861364]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:47:47 pan sudo[861489]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 07:47:47 pan systemd[861493]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:47:47 pan sudo[861489]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:47 pan sudo[861489]: pam_unix(sudo:session): session closed for user root May 1 07:47:47 pan sudo[861505]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 07:47:47 pan sudo[861505]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:47 pan sudo[861505]: pam_unix(sudo:session): session closed for user root May 1 07:47:47 pan sudo[861509]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 07:47:47 pan sudo[861509]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:47 pan sudo[861509]: pam_unix(sudo:session): session closed for user root May 1 07:47:47 pan sudo[861513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 07:47:47 pan sudo[861513]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:47 pan sudo[861513]: pam_unix(sudo:session): session closed for user root May 1 07:47:47 pan sudo[861517]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 07:47:47 pan sudo[861517]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:47 pan sudo[861517]: pam_unix(sudo:session): session closed for user root May 1 07:47:47 pan sudo[861521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 07:47:47 pan sudo[861521]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:47 pan sudo[861521]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861531]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 07:47:50 pan sudo[861531]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861531]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861536]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 07:47:50 pan sudo[861536]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861536]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 07:47:50 pan sudo[861542]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861542]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861547]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 07:47:50 pan sudo[861547]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861547]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861551]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GjqAEgKVPmMC5Jvg.~ May 1 07:47:50 pan sudo[861551]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861551]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861555]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GjqAEgKVPmMC5Jvg.~\'' May 1 07:47:50 pan sudo[861555]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861555]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861561]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GjqAEgKVPmMC5Jvg.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 07:47:50 pan sudo[861561]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861561]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861566]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 07:47:50 pan sudo[861566]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861566]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861572]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 07:47:50 pan sudo[861572]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861572]: pam_unix(sudo:session): session closed for user root May 1 07:47:50 pan sudo[861577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 07:47:50 pan sudo[861577]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:50 pan sudo[861577]: pam_unix(sudo:session): session closed for user root May 1 07:47:51 pan sudo[861790]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 07:47:51 pan sudo[861790]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 07:47:51 pan sudo[861790]: pam_unix(sudo:session): session closed for user root May 1 07:47:53 pan sshd[861795]: Invalid user server from 125.247.116.158 port 60138 May 1 07:47:53 pan sshd[861795]: pam_unix(sshd:auth): check pass; user unknown May 1 07:47:53 pan sshd[861795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.247.116.158 May 1 07:47:55 pan sshd[861795]: Failed password for invalid user server from 125.247.116.158 port 60138 ssh2 May 1 07:48:01 pan systemd[861853]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:49:01 pan systemd[861972]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:50:01 pan systemd[862130]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:50:01 pan systemd[862142]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:50:01 pan systemd[862151]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:51:01 pan systemd[863082]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:52:01 pan systemd[863187]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:53:01 pan systemd[863499]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:54:01 pan systemd[863602]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:55:01 pan systemd[863812]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 07:55:01 pan systemd[863825]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:55:01 pan systemd[863835]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 07:55:11 pan systemd[863833]: pam_unix(systemd-user:session): session closed for user bangherangstudio May 1 07:56:01 pan systemd[864763]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:57:01 pan systemd[864857]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:58:01 pan systemd[864953]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:59:01 pan systemd[865060]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 07:59:01 pan systemd[865064]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:00:01 pan systemd[865257]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:00:01 pan systemd[865266]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:00:01 pan systemd[865279]: pam_unix(systemd-user:session): session opened for user mailman by (uid=0) May 1 08:00:01 pan systemd[865290]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:01:01 pan systemd[866313]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:02:01 pan systemd[866437]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:03:01 pan systemd[866534]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:04:01 pan systemd[866665]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:04:01 pan systemd[866669]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:04:02 pan unix_chkpwd[866700]: password check failed for user (root) May 1 08:04:02 pan sshd[866648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.115.208.8 user=root May 1 08:04:03 pan sshd[866648]: Failed password for root from 181.115.208.8 port 49298 ssh2 May 1 08:04:04 pan sshd[866648]: Received disconnect from 181.115.208.8 port 49298:11: Bye Bye [preauth] May 1 08:04:04 pan sshd[866648]: Disconnected from authenticating user root 181.115.208.8 port 49298 [preauth] May 1 08:04:17 pan sshd[866706]: Connection closed by 199.45.155.82 port 51018 [preauth] May 1 08:05:01 pan systemd[866885]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:05:01 pan systemd[866901]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:05:01 pan systemd[866906]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:06:01 pan systemd[867688]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:07:01 pan systemd[867942]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:08:01 pan systemd[868391]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:09:01 pan systemd[868500]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:09:01 pan systemd[868505]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:10:01 pan systemd[868696]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:10:01 pan systemd[868711]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:10:01 pan systemd[868717]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:11:01 pan systemd[869575]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:12:01 pan systemd[869836]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:13:01 pan systemd[869949]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:14:00 pan sshd[870055]: Invalid user test9 from 223.247.153.211 port 42060 May 1 08:14:00 pan sshd[870055]: pam_unix(sshd:auth): check pass; user unknown May 1 08:14:00 pan sshd[870055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.153.211 May 1 08:14:01 pan systemd[870073]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:14:01 pan systemd[870078]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:14:02 pan sshd[870055]: Failed password for invalid user test9 from 223.247.153.211 port 42060 ssh2 May 1 08:14:05 pan sshd[870055]: Received disconnect from 223.247.153.211 port 42060:11: Bye Bye [preauth] May 1 08:14:05 pan sshd[870055]: Disconnected from invalid user test9 223.247.153.211 port 42060 [preauth] May 1 08:15:01 pan systemd[870252]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:15:01 pan systemd[870261]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:15:01 pan systemd[870278]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:16:01 pan systemd[871057]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:17:01 pan systemd[871345]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:18:01 pan systemd[871446]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:19:01 pan systemd[871552]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:20:01 pan systemd[871716]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:20:01 pan systemd[871724]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:20:01 pan systemd[871739]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:21:01 pan systemd[872526]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:22:01 pan systemd[872848]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:23:01 pan systemd[873166]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:24:01 pan systemd[873280]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:25:01 pan systemd[873458]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:25:01 pan systemd[873472]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:25:01 pan systemd[873480]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:26:01 pan systemd[874264]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:27:01 pan systemd[874559]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:27:48 pan unix_chkpwd[874639]: password check failed for user (root) May 1 08:27:48 pan sshd[874635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.153.211 user=root May 1 08:27:50 pan sshd[874635]: Failed password for root from 223.247.153.211 port 60610 ssh2 May 1 08:27:51 pan sshd[874635]: Received disconnect from 223.247.153.211 port 60610:11: Bye Bye [preauth] May 1 08:27:51 pan sshd[874635]: Disconnected from authenticating user root 223.247.153.211 port 60610 [preauth] May 1 08:28:01 pan systemd[874668]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:29:01 pan systemd[874782]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:29:01 pan systemd[874787]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:30:01 pan systemd[874982]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:30:01 pan systemd[874992]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:30:01 pan systemd[875004]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:30:20 pan sshd[875729]: Invalid user gialauyacht from 213.209.159.236 port 36966 May 1 08:30:20 pan sshd[875729]: pam_unix(sshd:auth): check pass; user unknown May 1 08:30:20 pan sshd[875729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.236 May 1 08:30:23 pan sshd[875729]: Failed password for invalid user gialauyacht from 213.209.159.236 port 36966 ssh2 May 1 08:30:24 pan sshd[875729]: Connection closed by invalid user gialauyacht 213.209.159.236 port 36966 [preauth] May 1 08:31:01 pan systemd[875798]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:31:12 pan systemd[875801]: pam_unix(systemd-user:session): session closed for user bangherangstudio May 1 08:32:01 pan systemd[876065]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:33:01 pan systemd[876170]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:33:05 pan sshd[876193]: error: kex_exchange_identification: read: Connection reset by peer May 1 08:33:11 pan sshd[876202]: Invalid user gialauyacht from 213.209.159.225 port 54986 May 1 08:33:11 pan sshd[876202]: pam_unix(sshd:auth): check pass; user unknown May 1 08:33:11 pan sshd[876202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.225 May 1 08:33:14 pan sshd[876202]: Failed password for invalid user gialauyacht from 213.209.159.225 port 54986 ssh2 May 1 08:33:15 pan sshd[876202]: Connection closed by invalid user gialauyacht 213.209.159.225 port 54986 [preauth] May 1 08:34:01 pan systemd[876308]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:35:01 pan systemd[876467]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:35:01 pan systemd[876478]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:35:01 pan systemd[876492]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:36:02 pan systemd[877293]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:37:01 pan systemd[877548]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:38:01 pan systemd[877873]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:39:01 pan systemd[878000]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:39:01 pan systemd[878005]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:40:01 pan systemd[878178]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:40:01 pan systemd[878188]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:40:01 pan systemd[878198]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:40:40 pan sshd[878956]: Invalid user gialauyacht from 213.209.159.235 port 47502 May 1 08:40:40 pan sshd[878956]: pam_unix(sshd:auth): check pass; user unknown May 1 08:40:40 pan sshd[878956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.235 May 1 08:40:42 pan sshd[878956]: Failed password for invalid user gialauyacht from 213.209.159.235 port 47502 ssh2 May 1 08:40:43 pan sshd[878956]: Connection closed by invalid user gialauyacht 213.209.159.235 port 47502 [preauth] May 1 08:41:01 pan systemd[878999]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:42:01 pan systemd[879253]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:42:49 pan unix_chkpwd[879322]: password check failed for user (root) May 1 08:42:49 pan sshd[879315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.153.211 user=root May 1 08:42:50 pan sshd[879315]: Failed password for root from 223.247.153.211 port 47400 ssh2 May 1 08:42:51 pan sshd[879315]: Received disconnect from 223.247.153.211 port 47400:11: Bye Bye [preauth] May 1 08:42:51 pan sshd[879315]: Disconnected from authenticating user root 223.247.153.211 port 47400 [preauth] May 1 08:43:01 pan systemd[879365]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:43:38 pan sshd[879435]: error: kex_exchange_identification: Connection closed by remote host May 1 08:44:01 pan systemd[879488]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:44:01 pan systemd[879493]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:45:01 pan systemd[879954]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:45:01 pan systemd[879965]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:45:01 pan systemd[879977]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:46:01 pan systemd[880787]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:46:36 pan sshd[881002]: error: kex_exchange_identification: Connection closed by remote host May 1 08:47:01 pan systemd[881056]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:47:47 pan sudo[881124]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 08:47:47 pan systemd[881128]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:47:47 pan sudo[881124]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:47 pan sudo[881124]: pam_unix(sudo:session): session closed for user root May 1 08:47:47 pan sudo[881139]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 08:47:47 pan sudo[881139]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:47 pan sudo[881139]: pam_unix(sudo:session): session closed for user root May 1 08:47:47 pan sudo[881143]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 08:47:47 pan sudo[881143]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:47 pan sudo[881143]: pam_unix(sudo:session): session closed for user root May 1 08:47:47 pan sudo[881147]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 08:47:47 pan sudo[881147]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:47 pan sudo[881147]: pam_unix(sudo:session): session closed for user root May 1 08:47:47 pan sudo[881151]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 08:47:47 pan sudo[881151]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:47 pan sudo[881151]: pam_unix(sudo:session): session closed for user root May 1 08:47:47 pan sudo[881155]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 08:47:47 pan sudo[881155]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:47 pan sudo[881155]: pam_unix(sudo:session): session closed for user root May 1 08:47:48 pan sudo[881161]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 08:47:48 pan sudo[881161]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:48 pan sudo[881161]: pam_unix(sudo:session): session closed for user root May 1 08:47:48 pan sudo[881166]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 08:47:48 pan sudo[881166]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:48 pan sudo[881166]: pam_unix(sudo:session): session closed for user root May 1 08:47:48 pan sudo[881172]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 08:47:48 pan sudo[881172]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:48 pan sudo[881172]: pam_unix(sudo:session): session closed for user root May 1 08:47:48 pan sudo[881177]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 08:47:48 pan sudo[881177]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:48 pan sudo[881177]: pam_unix(sudo:session): session closed for user root May 1 08:47:48 pan sudo[881181]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qCrtSyjZHitWdDZB.~ May 1 08:47:48 pan sudo[881181]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:48 pan sudo[881181]: pam_unix(sudo:session): session closed for user root May 1 08:47:48 pan sudo[881186]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qCrtSyjZHitWdDZB.~\'' May 1 08:47:48 pan sudo[881186]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:48 pan sudo[881186]: pam_unix(sudo:session): session closed for user root May 1 08:47:48 pan sudo[881191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qCrtSyjZHitWdDZB.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 08:47:48 pan sudo[881191]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:48 pan sudo[881191]: pam_unix(sudo:session): session closed for user root May 1 08:47:48 pan sudo[881195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 08:47:48 pan sudo[881195]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:48 pan sudo[881195]: pam_unix(sudo:session): session closed for user root May 1 08:47:49 pan sudo[881202]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 08:47:49 pan sudo[881202]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:49 pan sudo[881202]: pam_unix(sudo:session): session closed for user root May 1 08:47:49 pan sudo[881207]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 08:47:49 pan sudo[881207]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:49 pan sudo[881207]: pam_unix(sudo:session): session closed for user root May 1 08:47:50 pan sudo[881420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 08:47:50 pan sudo[881420]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 08:47:50 pan sudo[881420]: pam_unix(sudo:session): session closed for user root May 1 08:48:01 pan systemd[881459]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:49:01 pan systemd[881646]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:49:56 pan sshd[881774]: Invalid user pensaunpo from 213.209.159.226 port 42912 May 1 08:49:56 pan sshd[881774]: pam_unix(sshd:auth): check pass; user unknown May 1 08:49:56 pan sshd[881774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.226 May 1 08:49:57 pan sshd[881774]: Failed password for invalid user pensaunpo from 213.209.159.226 port 42912 ssh2 May 1 08:49:57 pan sshd[881774]: Connection closed by invalid user pensaunpo 213.209.159.226 port 42912 [preauth] May 1 08:50:01 pan systemd[881852]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:50:01 pan systemd[881866]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:50:01 pan systemd[881873]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:51:01 pan systemd[882651]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:52:01 pan systemd[882910]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:53:01 pan systemd[883228]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:54:02 pan systemd[883331]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:55:01 pan systemd[883483]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:55:01 pan systemd[883500]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:55:01 pan systemd[883506]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 08:56:01 pan systemd[884288]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:57:01 pan systemd[884523]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:58:01 pan systemd[884675]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:59:01 pan systemd[884822]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 08:59:01 pan systemd[884827]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 08:59:11 pan systemd[884832]: pam_unix(systemd-user:session): session closed for user bangherangstudio May 1 09:00:01 pan systemd[885036]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:00:01 pan systemd[885037]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:00:01 pan systemd[885057]: pam_unix(systemd-user:session): session opened for user mailman by (uid=0) May 1 09:00:01 pan systemd[885065]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:01:01 pan systemd[885878]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:02:01 pan systemd[886152]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:03:01 pan systemd[886266]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:04:01 pan systemd[886382]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:04:01 pan systemd[886387]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:05:01 pan systemd[886578]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:05:01 pan systemd[886592]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:05:01 pan systemd[886598]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:06:01 pan systemd[887383]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:07:01 pan systemd[887640]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:08:01 pan systemd[887986]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:08:34 pan sshd[888043]: Invalid user gialauyacht from 213.209.159.226 port 57722 May 1 09:08:34 pan sshd[888043]: pam_unix(sshd:auth): check pass; user unknown May 1 09:08:34 pan sshd[888043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.226 May 1 09:08:35 pan sshd[888043]: Failed password for invalid user gialauyacht from 213.209.159.226 port 57722 ssh2 May 1 09:08:35 pan sshd[888047]: Invalid user gialauyacht from 213.209.159.227 port 52396 May 1 09:08:36 pan sshd[888047]: pam_unix(sshd:auth): check pass; user unknown May 1 09:08:36 pan sshd[888047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.227 May 1 09:08:36 pan sshd[888043]: Connection closed by invalid user gialauyacht 213.209.159.226 port 57722 [preauth] May 1 09:08:38 pan sshd[888047]: Failed password for invalid user gialauyacht from 213.209.159.227 port 52396 ssh2 May 1 09:08:39 pan sshd[888047]: Connection closed by invalid user gialauyacht 213.209.159.227 port 52396 [preauth] May 1 09:09:01 pan systemd[888100]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:09:01 pan systemd[888104]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:09:09 pan sshd[888143]: Connection reset by 92.118.39.197 port 9620 [preauth] May 1 09:10:01 pan systemd[888303]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:10:01 pan systemd[888318]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:10:01 pan systemd[888325]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:10:21 pan systemd[888331]: pam_unix(systemd-user:session): session closed for user munin May 1 09:11:01 pan systemd[889114]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:12:01 pan systemd[889369]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:13:01 pan systemd[889462]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:14:01 pan systemd[889571]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:14:01 pan systemd[889575]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:15:01 pan systemd[889759]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:15:01 pan systemd[889768]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:15:01 pan systemd[889783]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:15:52 pan sshd[890543]: Invalid user test from 223.17.5.126 port 42590 May 1 09:15:52 pan sshd[890543]: pam_unix(sshd:auth): check pass; user unknown May 1 09:15:52 pan sshd[890543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.5.126 May 1 09:15:53 pan sshd[890545]: Invalid user test1 from 102.88.137.145 port 52448 May 1 09:15:53 pan sshd[890545]: pam_unix(sshd:auth): check pass; user unknown May 1 09:15:53 pan sshd[890545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.88.137.145 May 1 09:15:54 pan sshd[890543]: Failed password for invalid user test from 223.17.5.126 port 42590 ssh2 May 1 09:15:55 pan sshd[890545]: Failed password for invalid user test1 from 102.88.137.145 port 52448 ssh2 May 1 09:15:56 pan sshd[890543]: Received disconnect from 223.17.5.126 port 42590:11: Bye Bye [preauth] May 1 09:15:56 pan sshd[890543]: Disconnected from invalid user test 223.17.5.126 port 42590 [preauth] May 1 09:15:56 pan sshd[890545]: Received disconnect from 102.88.137.145 port 52448:11: Bye Bye [preauth] May 1 09:15:56 pan sshd[890545]: Disconnected from invalid user test1 102.88.137.145 port 52448 [preauth] May 1 09:16:01 pan systemd[890574]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:17:01 pan systemd[890858]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:18:01 pan systemd[891078]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:18:32 pan sshd[891143]: error: type 20 seq 2 [preauth] May 1 09:18:32 pan sshd[891143]: error: type 30 seq 3 [preauth] May 1 09:18:33 pan sshd[891143]: error: type 20 seq 4 [preauth] May 1 09:18:33 pan sshd[891143]: error: type 30 seq 5 [preauth] May 1 09:18:35 pan sshd[891143]: error: type 20 seq 6 [preauth] May 1 09:18:35 pan sshd[891143]: error: type 30 seq 7 [preauth] May 1 09:19:01 pan systemd[891196]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:19:01 pan sshd[891143]: Connection reset by 45.192.184.50 port 6100 [preauth] May 1 09:20:01 pan systemd[891373]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:20:01 pan systemd[891386]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:20:01 pan systemd[891394]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:21:01 pan systemd[892175]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:22:01 pan systemd[892451]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:23:01 pan systemd[892801]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:24:01 pan systemd[892968]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:25:01 pan systemd[893128]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:25:01 pan systemd[893144]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:25:01 pan systemd[893152]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:25:23 pan sshd[893875]: Invalid user deploy from 102.88.137.145 port 55994 May 1 09:25:23 pan sshd[893875]: pam_unix(sshd:auth): check pass; user unknown May 1 09:25:23 pan sshd[893875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.88.137.145 May 1 09:25:25 pan sshd[893875]: Failed password for invalid user deploy from 102.88.137.145 port 55994 ssh2 May 1 09:25:26 pan sshd[893875]: Received disconnect from 102.88.137.145 port 55994:11: Bye Bye [preauth] May 1 09:25:26 pan sshd[893875]: Disconnected from invalid user deploy 102.88.137.145 port 55994 [preauth] May 1 09:26:01 pan systemd[893940]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:26:08 pan sshd[893973]: Invalid user admin from 223.17.5.126 port 36016 May 1 09:26:08 pan sshd[893973]: pam_unix(sshd:auth): check pass; user unknown May 1 09:26:08 pan sshd[893973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.5.126 May 1 09:26:10 pan sshd[893973]: Failed password for invalid user admin from 223.17.5.126 port 36016 ssh2 May 1 09:26:10 pan sshd[893973]: Received disconnect from 223.17.5.126 port 36016:11: Bye Bye [preauth] May 1 09:26:10 pan sshd[893973]: Disconnected from invalid user admin 223.17.5.126 port 36016 [preauth] May 1 09:26:25 pan sshd[893998]: Invalid user git from 102.88.137.145 port 44248 May 1 09:26:25 pan sshd[893998]: pam_unix(sshd:auth): check pass; user unknown May 1 09:26:25 pan sshd[893998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.88.137.145 May 1 09:26:27 pan sshd[893998]: Failed password for invalid user git from 102.88.137.145 port 44248 ssh2 May 1 09:27:01 pan systemd[894227]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:27:08 pan sshd[894253]: Invalid user ubuntu from 223.17.5.126 port 54718 May 1 09:27:08 pan sshd[894253]: pam_unix(sshd:auth): check pass; user unknown May 1 09:27:08 pan sshd[894253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.5.126 May 1 09:27:10 pan sshd[894253]: Failed password for invalid user ubuntu from 223.17.5.126 port 54718 ssh2 May 1 09:27:11 pan sshd[894253]: Received disconnect from 223.17.5.126 port 54718:11: Bye Bye [preauth] May 1 09:27:11 pan sshd[894253]: Disconnected from invalid user ubuntu 223.17.5.126 port 54718 [preauth] May 1 09:28:01 pan systemd[894356]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:29:01 pan systemd[894468]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:29:01 pan systemd[894473]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:30:01 pan systemd[894670]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:30:01 pan systemd[894687]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:30:01 pan systemd[894695]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:31:01 pan systemd[895483]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:32:01 pan systemd[895603]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:33:01 pan systemd[895851]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:34:01 pan systemd[895957]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:35:02 pan systemd[896126]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:35:02 pan systemd[896141]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:35:02 pan systemd[896146]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:36:01 pan systemd[896936]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:37:01 pan systemd[897059]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:38:01 pan systemd[897561]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:39:01 pan systemd[897684]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:39:01 pan systemd[897689]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:40:01 pan systemd[897883]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:40:01 pan systemd[897897]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:40:01 pan systemd[897906]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:41:01 pan systemd[898691]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:41:01 pan sshd[898711]: Invalid user pensaunpo from 213.209.159.228 port 49966 May 1 09:41:01 pan sshd[898711]: pam_unix(sshd:auth): check pass; user unknown May 1 09:41:01 pan sshd[898711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.228 May 1 09:41:03 pan sshd[898711]: Failed password for invalid user pensaunpo from 213.209.159.228 port 49966 ssh2 May 1 09:41:04 pan sshd[898711]: Connection closed by invalid user pensaunpo 213.209.159.228 port 49966 [preauth] May 1 09:42:01 pan systemd[898813]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:42:31 pan sshd[898873]: Invalid user ispadmin from 101.36.124.127 port 52904 May 1 09:42:31 pan sshd[898873]: pam_unix(sshd:auth): check pass; user unknown May 1 09:42:31 pan sshd[898873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.124.127 May 1 09:42:34 pan sshd[898873]: Failed password for invalid user ispadmin from 101.36.124.127 port 52904 ssh2 May 1 09:42:35 pan sshd[898873]: Received disconnect from 101.36.124.127 port 52904:11: Bye Bye [preauth] May 1 09:42:35 pan sshd[898873]: Disconnected from invalid user ispadmin 101.36.124.127 port 52904 [preauth] May 1 09:43:01 pan systemd[899051]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:44:01 pan systemd[899167]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:44:01 pan systemd[899171]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:45:01 pan systemd[899357]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:45:01 pan systemd[899371]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:45:01 pan systemd[899378]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:46:01 pan systemd[900168]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:47:01 pan systemd[900284]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:47:47 pan sudo[900488]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 09:47:47 pan systemd[900493]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:47:47 pan sudo[900488]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:47 pan sudo[900488]: pam_unix(sudo:session): session closed for user root May 1 09:47:47 pan sudo[900504]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 09:47:47 pan sudo[900504]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:47 pan sudo[900504]: pam_unix(sudo:session): session closed for user root May 1 09:47:47 pan sudo[900508]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 09:47:47 pan sudo[900508]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:47 pan sudo[900508]: pam_unix(sudo:session): session closed for user root May 1 09:47:47 pan sudo[900512]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 09:47:47 pan sudo[900512]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:47 pan sudo[900512]: pam_unix(sudo:session): session closed for user root May 1 09:47:47 pan sudo[900516]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 09:47:47 pan sudo[900516]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:47 pan sudo[900516]: pam_unix(sudo:session): session closed for user root May 1 09:47:47 pan sudo[900521]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 09:47:47 pan sudo[900521]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:47 pan sudo[900521]: pam_unix(sudo:session): session closed for user root May 1 09:47:48 pan sudo[900527]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 09:47:48 pan sudo[900527]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:48 pan sudo[900527]: pam_unix(sudo:session): session closed for user root May 1 09:47:48 pan sudo[900533]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 09:47:48 pan sudo[900533]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:48 pan sudo[900533]: pam_unix(sudo:session): session closed for user root May 1 09:47:48 pan sudo[900539]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 09:47:48 pan sudo[900539]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:48 pan sudo[900539]: pam_unix(sudo:session): session closed for user root May 1 09:47:48 pan sudo[900545]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 09:47:48 pan sudo[900545]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:48 pan sudo[900545]: pam_unix(sudo:session): session closed for user root May 1 09:47:48 pan sudo[900549]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hNuL9nai9TAnNle8.~ May 1 09:47:48 pan sudo[900549]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:48 pan sudo[900549]: pam_unix(sudo:session): session closed for user root May 1 09:47:48 pan sudo[900553]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hNuL9nai9TAnNle8.~\'' May 1 09:47:48 pan sudo[900553]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:48 pan sudo[900553]: pam_unix(sudo:session): session closed for user root May 1 09:47:48 pan sudo[900559]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hNuL9nai9TAnNle8.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 09:47:48 pan sudo[900559]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:48 pan sudo[900559]: pam_unix(sudo:session): session closed for user root May 1 09:47:48 pan sudo[900563]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 09:47:48 pan sudo[900563]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:48 pan sudo[900563]: pam_unix(sudo:session): session closed for user root May 1 09:47:48 pan sudo[900571]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 09:47:48 pan sudo[900571]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:49 pan sudo[900571]: pam_unix(sudo:session): session closed for user root May 1 09:47:49 pan sudo[900576]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 09:47:49 pan sudo[900576]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:49 pan sudo[900576]: pam_unix(sudo:session): session closed for user root May 1 09:47:49 pan sudo[900788]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 09:47:49 pan sudo[900788]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 09:47:49 pan sudo[900788]: pam_unix(sudo:session): session closed for user root May 1 09:47:57 pan sshd[900805]: Invalid user admin from 35.187.64.30 port 18058 May 1 09:47:57 pan sshd[900805]: pam_unix(sshd:auth): check pass; user unknown May 1 09:47:57 pan sshd[900805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.187.64.30 May 1 09:47:58 pan sshd[900805]: Failed password for invalid user admin from 35.187.64.30 port 18058 ssh2 May 1 09:48:00 pan sshd[900805]: Connection closed by invalid user admin 35.187.64.30 port 18058 [preauth] May 1 09:48:01 pan systemd[900838]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:48:02 pan sshd[900861]: error: kex_exchange_identification: Connection closed by remote host May 1 09:48:05 pan sshd[900864]: Unable to negotiate with 35.195.165.181 port 12670: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] May 1 09:48:07 pan sshd[900803]: Connection closed by 35.187.64.30 port 18050 [preauth] May 1 09:49:01 pan systemd[901202]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:50:01 pan systemd[901373]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:50:01 pan systemd[901388]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:50:02 pan systemd[901393]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:51:01 pan systemd[902199]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:52:01 pan systemd[902331]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:52:46 pan sshd[902619]: Invalid user postgres from 101.36.124.127 port 40154 May 1 09:52:46 pan sshd[902619]: pam_unix(sshd:auth): check pass; user unknown May 1 09:52:46 pan sshd[902619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.124.127 May 1 09:52:48 pan sshd[902619]: Failed password for invalid user postgres from 101.36.124.127 port 40154 ssh2 May 1 09:52:48 pan sshd[902619]: Received disconnect from 101.36.124.127 port 40154:11: Bye Bye [preauth] May 1 09:52:48 pan sshd[902619]: Disconnected from invalid user postgres 101.36.124.127 port 40154 [preauth] May 1 09:53:01 pan systemd[902782]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:53:40 pan sshd[902845]: Invalid user test from 101.36.124.127 port 39688 May 1 09:53:40 pan sshd[902845]: pam_unix(sshd:auth): check pass; user unknown May 1 09:53:40 pan sshd[902845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.124.127 May 1 09:53:42 pan sshd[902845]: Failed password for invalid user test from 101.36.124.127 port 39688 ssh2 May 1 09:53:44 pan sshd[902845]: Received disconnect from 101.36.124.127 port 39688:11: Bye Bye [preauth] May 1 09:53:44 pan sshd[902845]: Disconnected from invalid user test 101.36.124.127 port 39688 [preauth] May 1 09:54:01 pan systemd[902911]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:54:24 pan sshd[902957]: Invalid user guest from 51.15.145.170 port 25503 May 1 09:54:24 pan sshd[902957]: pam_unix(sshd:auth): check pass; user unknown May 1 09:54:24 pan sshd[902957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.145.170 May 1 09:54:26 pan sshd[902957]: Failed password for invalid user guest from 51.15.145.170 port 25503 ssh2 May 1 09:54:28 pan sshd[902957]: Received disconnect from 51.15.145.170 port 25503:11: Bye Bye [preauth] May 1 09:54:28 pan sshd[902957]: Disconnected from invalid user guest 51.15.145.170 port 25503 [preauth] May 1 09:55:01 pan systemd[903069]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 09:55:01 pan systemd[903083]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:55:01 pan systemd[903090]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 09:55:08 pan sshd[902995]: Connection closed by 103.203.57.2 port 48928 [preauth] May 1 09:55:25 pan sshd[903830]: Invalid user ss3server from 52.176.211.73 port 59942 May 1 09:55:25 pan sshd[903830]: pam_unix(sshd:auth): check pass; user unknown May 1 09:55:25 pan sshd[903830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.176.211.73 May 1 09:55:27 pan sshd[903830]: Failed password for invalid user ss3server from 52.176.211.73 port 59942 ssh2 May 1 09:55:28 pan sshd[903830]: Received disconnect from 52.176.211.73 port 59942:11: Bye Bye [preauth] May 1 09:55:28 pan sshd[903830]: Disconnected from invalid user ss3server 52.176.211.73 port 59942 [preauth] May 1 09:56:01 pan systemd[903976]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:56:20 pan sshd[904076]: Invalid user scuser from 202.165.15.132 port 62320 May 1 09:56:20 pan sshd[904076]: pam_unix(sshd:auth): check pass; user unknown May 1 09:56:20 pan sshd[904076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.165.15.132 May 1 09:56:22 pan sshd[904076]: Failed password for invalid user scuser from 202.165.15.132 port 62320 ssh2 May 1 09:56:24 pan sshd[904076]: Received disconnect from 202.165.15.132 port 62320:11: Bye Bye [preauth] May 1 09:56:24 pan sshd[904076]: Disconnected from invalid user scuser 202.165.15.132 port 62320 [preauth] May 1 09:57:01 pan systemd[904151]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:57:49 pan sshd[904226]: Invalid user dev from 190.108.60.101 port 44664 May 1 09:57:49 pan sshd[904226]: pam_unix(sshd:auth): check pass; user unknown May 1 09:57:49 pan sshd[904226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.108.60.101 May 1 09:57:51 pan sshd[904226]: Failed password for invalid user dev from 190.108.60.101 port 44664 ssh2 May 1 09:57:52 pan sshd[904226]: Received disconnect from 190.108.60.101 port 44664:11: Bye Bye [preauth] May 1 09:57:52 pan sshd[904226]: Disconnected from invalid user dev 190.108.60.101 port 44664 [preauth] May 1 09:58:01 pan systemd[904382]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:59:01 pan systemd[904509]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 09:59:01 pan systemd[904514]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:00:01 pan systemd[904856]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:00:01 pan systemd[904871]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:00:01 pan systemd[904880]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:00:34 pan sshd[905670]: Invalid user minecraft from 121.32.49.226 port 55399 May 1 10:00:34 pan sshd[905670]: pam_unix(sshd:auth): check pass; user unknown May 1 10:00:34 pan sshd[905670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.32.49.226 May 1 10:00:36 pan sshd[905670]: Failed password for invalid user minecraft from 121.32.49.226 port 55399 ssh2 May 1 10:00:37 pan sshd[905670]: Received disconnect from 121.32.49.226 port 55399:11: Bye Bye [preauth] May 1 10:00:37 pan sshd[905670]: Disconnected from invalid user minecraft 121.32.49.226 port 55399 [preauth] May 1 10:01:01 pan systemd[905731]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:02:01 pan systemd[905884]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:03:02 pan systemd[906116]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:03:31 pan sshd[906176]: Invalid user developer from 202.165.15.132 port 47044 May 1 10:03:31 pan sshd[906176]: pam_unix(sshd:auth): check pass; user unknown May 1 10:03:31 pan sshd[906176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.165.15.132 May 1 10:03:33 pan sshd[906176]: Failed password for invalid user developer from 202.165.15.132 port 47044 ssh2 May 1 10:03:35 pan sshd[906176]: Received disconnect from 202.165.15.132 port 47044:11: Bye Bye [preauth] May 1 10:03:35 pan sshd[906176]: Disconnected from invalid user developer 202.165.15.132 port 47044 [preauth] May 1 10:03:49 pan sshd[906193]: Invalid user admin from 52.176.211.73 port 43828 May 1 10:03:49 pan sshd[906193]: pam_unix(sshd:auth): check pass; user unknown May 1 10:03:49 pan sshd[906193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.176.211.73 May 1 10:03:51 pan sshd[906193]: Failed password for invalid user admin from 52.176.211.73 port 43828 ssh2 May 1 10:03:52 pan sshd[906193]: Received disconnect from 52.176.211.73 port 43828:11: Bye Bye [preauth] May 1 10:03:52 pan sshd[906193]: Disconnected from invalid user admin 52.176.211.73 port 43828 [preauth] May 1 10:04:01 pan systemd[906235]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:04:01 pan systemd[906240]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:04:30 pan sshd[906306]: Invalid user admin from 202.165.15.132 port 42469 May 1 10:04:30 pan sshd[906306]: pam_unix(sshd:auth): check pass; user unknown May 1 10:04:30 pan sshd[906306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.165.15.132 May 1 10:04:32 pan sshd[906306]: Failed password for invalid user admin from 202.165.15.132 port 42469 ssh2 May 1 10:04:33 pan sshd[906306]: Received disconnect from 202.165.15.132 port 42469:11: Bye Bye [preauth] May 1 10:04:33 pan sshd[906306]: Disconnected from invalid user admin 202.165.15.132 port 42469 [preauth] May 1 10:04:41 pan sshd[906335]: Invalid user ubuntu from 52.176.211.73 port 57416 May 1 10:04:41 pan sshd[906335]: pam_unix(sshd:auth): check pass; user unknown May 1 10:04:41 pan sshd[906335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.176.211.73 May 1 10:04:43 pan sshd[906335]: Failed password for invalid user ubuntu from 52.176.211.73 port 57416 ssh2 May 1 10:04:44 pan sshd[906335]: Received disconnect from 52.176.211.73 port 57416:11: Bye Bye [preauth] May 1 10:04:44 pan sshd[906335]: Disconnected from invalid user ubuntu 52.176.211.73 port 57416 [preauth] May 1 10:05:01 pan systemd[906465]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:05:01 pan systemd[906476]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:05:01 pan systemd[906488]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:06:01 pan systemd[907292]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:07:01 pan systemd[907402]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:07:20 pan sshd[907661]: Invalid user appadmin from 190.108.60.101 port 51124 May 1 10:07:20 pan sshd[907661]: pam_unix(sshd:auth): check pass; user unknown May 1 10:07:20 pan sshd[907661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.108.60.101 May 1 10:07:22 pan sshd[907661]: Failed password for invalid user appadmin from 190.108.60.101 port 51124 ssh2 May 1 10:07:22 pan sshd[907661]: Received disconnect from 190.108.60.101 port 51124:11: Bye Bye [preauth] May 1 10:07:22 pan sshd[907661]: Disconnected from invalid user appadmin 190.108.60.101 port 51124 [preauth] May 1 10:08:01 pan systemd[907854]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:08:32 pan unix_chkpwd[907909]: password check failed for user (root) May 1 10:08:32 pan sshd[907905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.108.60.101 user=root May 1 10:08:34 pan sshd[907905]: Failed password for root from 190.108.60.101 port 41216 ssh2 May 1 10:08:35 pan sshd[907905]: Received disconnect from 190.108.60.101 port 41216:11: Bye Bye [preauth] May 1 10:08:35 pan sshd[907905]: Disconnected from authenticating user root 190.108.60.101 port 41216 [preauth] May 1 10:09:01 pan systemd[907985]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:09:01 pan systemd[907990]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:09:33 pan sshd[908076]: Invalid user user9 from 24.19.160.116 port 48920 May 1 10:09:33 pan sshd[908076]: pam_unix(sshd:auth): check pass; user unknown May 1 10:09:33 pan sshd[908076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.19.160.116 May 1 10:09:35 pan sshd[908076]: Failed password for invalid user user9 from 24.19.160.116 port 48920 ssh2 May 1 10:09:35 pan sshd[908076]: Received disconnect from 24.19.160.116 port 48920:11: Bye Bye [preauth] May 1 10:09:35 pan sshd[908076]: Disconnected from invalid user user9 24.19.160.116 port 48920 [preauth] May 1 10:10:01 pan systemd[908184]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:10:01 pan systemd[908199]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:10:01 pan systemd[908205]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:11:01 pan systemd[908991]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:12:01 pan systemd[909100]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:13:01 pan systemd[909204]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:13:45 pan sshd[909415]: Invalid user pensaunpo from 213.209.159.235 port 53662 May 1 10:13:45 pan sshd[909415]: pam_unix(sshd:auth): check pass; user unknown May 1 10:13:45 pan sshd[909415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.235 May 1 10:13:47 pan sshd[909415]: Failed password for invalid user pensaunpo from 213.209.159.235 port 53662 ssh2 May 1 10:13:48 pan sshd[909415]: Connection closed by invalid user pensaunpo 213.209.159.235 port 53662 [preauth] May 1 10:14:01 pan systemd[909459]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:14:01 pan systemd[909464]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:15:01 pan systemd[909656]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:15:01 pan systemd[909663]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:15:01 pan systemd[909680]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:16:01 pan systemd[910487]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:16:04 pan sshd[910509]: error: kex_exchange_identification: banner line contains invalid characters May 1 10:16:04 pan sshd[910510]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" May 1 10:17:01 pan systemd[910681]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:17:49 pan sshd[910761]: Invalid user oracle from 72.79.42.117 port 47746 May 1 10:17:49 pan sshd[910761]: pam_unix(sshd:auth): check pass; user unknown May 1 10:17:49 pan sshd[910761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.79.42.117 May 1 10:17:50 pan sshd[910761]: Failed password for invalid user oracle from 72.79.42.117 port 47746 ssh2 May 1 10:17:51 pan sshd[910761]: Received disconnect from 72.79.42.117 port 47746:11: Bye Bye [preauth] May 1 10:17:51 pan sshd[910761]: Disconnected from invalid user oracle 72.79.42.117 port 47746 [preauth] May 1 10:18:01 pan systemd[910800]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:19:01 pan systemd[911042]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:19:41 pan unix_chkpwd[911108]: password check failed for user (root) May 1 10:19:41 pan sshd[911106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.121.177.138 user=root May 1 10:19:43 pan sshd[911106]: Failed password for root from 112.121.177.138 port 38570 ssh2 May 1 10:19:44 pan sshd[911106]: Connection closed by authenticating user root 112.121.177.138 port 38570 [preauth] May 1 10:19:44 pan sshd[911110]: Invalid user ubuntu from 112.121.177.138 port 38580 May 1 10:19:44 pan sshd[911110]: pam_unix(sshd:auth): check pass; user unknown May 1 10:19:44 pan sshd[911110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.121.177.138 May 1 10:19:46 pan sshd[911110]: Failed password for invalid user ubuntu from 112.121.177.138 port 38580 ssh2 May 1 10:19:47 pan sshd[911116]: Invalid user pensaunpo from 112.121.177.138 port 38596 May 1 10:19:47 pan sshd[911116]: pam_unix(sshd:auth): check pass; user unknown May 1 10:19:47 pan sshd[911116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.121.177.138 May 1 10:19:48 pan sshd[911110]: Connection closed by invalid user ubuntu 112.121.177.138 port 38580 [preauth] May 1 10:19:50 pan sshd[911116]: Failed password for invalid user pensaunpo from 112.121.177.138 port 38596 ssh2 May 1 10:20:01 pan systemd[911237]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:20:01 pan systemd[911249]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:20:01 pan systemd[911259]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:20:09 pan sshd[911948]: Invalid user ubuntu from 72.79.42.117 port 50684 May 1 10:20:09 pan sshd[911948]: pam_unix(sshd:auth): check pass; user unknown May 1 10:20:09 pan sshd[911948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.79.42.117 May 1 10:20:10 pan sshd[911948]: Failed password for invalid user ubuntu from 72.79.42.117 port 50684 ssh2 May 1 10:20:12 pan sshd[911948]: Received disconnect from 72.79.42.117 port 50684:11: Bye Bye [preauth] May 1 10:20:12 pan sshd[911948]: Disconnected from invalid user ubuntu 72.79.42.117 port 50684 [preauth] May 1 10:21:01 pan systemd[912047]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:21:02 pan unix_chkpwd[912068]: password check failed for user (mysql) May 1 10:21:02 pan sshd[912034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.79.42.117 user=mysql May 1 10:21:04 pan sshd[912034]: Failed password for mysql from 72.79.42.117 port 33188 ssh2 May 1 10:22:01 pan systemd[912200]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:22:17 pan sshd[912492]: Invalid user postgres from 121.32.49.226 port 54253 May 1 10:22:17 pan sshd[912492]: pam_unix(sshd:auth): check pass; user unknown May 1 10:22:17 pan sshd[912492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.32.49.226 May 1 10:22:19 pan sshd[912492]: Failed password for invalid user postgres from 121.32.49.226 port 54253 ssh2 May 1 10:22:20 pan sshd[912492]: Received disconnect from 121.32.49.226 port 54253:11: Bye Bye [preauth] May 1 10:22:20 pan sshd[912492]: Disconnected from invalid user postgres 121.32.49.226 port 54253 [preauth] May 1 10:23:01 pan systemd[912576]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:24:01 pan systemd[912818]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:24:26 pan sshd[912867]: Invalid user admin from 121.32.49.226 port 53976 May 1 10:24:26 pan sshd[912867]: pam_unix(sshd:auth): check pass; user unknown May 1 10:24:26 pan sshd[912867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.32.49.226 May 1 10:24:28 pan sshd[912867]: Failed password for invalid user admin from 121.32.49.226 port 53976 ssh2 May 1 10:24:42 pan sshd[912927]: Invalid user ssuser from 24.19.160.116 port 53922 May 1 10:24:42 pan sshd[912927]: pam_unix(sshd:auth): check pass; user unknown May 1 10:24:42 pan sshd[912927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.19.160.116 May 1 10:24:44 pan sshd[912927]: Failed password for invalid user ssuser from 24.19.160.116 port 53922 ssh2 May 1 10:24:44 pan sshd[912927]: Received disconnect from 24.19.160.116 port 53922:11: Bye Bye [preauth] May 1 10:24:44 pan sshd[912927]: Disconnected from invalid user ssuser 24.19.160.116 port 53922 [preauth] May 1 10:25:02 pan systemd[913021]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:25:02 pan systemd[913035]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:25:02 pan systemd[913044]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:25:36 pan sshd[913793]: Invalid user testuser from 24.19.160.116 port 47558 May 1 10:25:36 pan sshd[913793]: pam_unix(sshd:auth): check pass; user unknown May 1 10:25:36 pan sshd[913793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.19.160.116 May 1 10:25:38 pan sshd[913793]: Failed password for invalid user testuser from 24.19.160.116 port 47558 ssh2 May 1 10:26:01 pan systemd[913856]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:27:01 pan systemd[913994]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:27:15 pan sshd[914048]: Invalid user guest2 from 51.15.145.170 port 63896 May 1 10:27:15 pan sshd[914048]: pam_unix(sshd:auth): check pass; user unknown May 1 10:27:15 pan sshd[914048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.145.170 May 1 10:27:17 pan sshd[914048]: Failed password for invalid user guest2 from 51.15.145.170 port 63896 ssh2 May 1 10:27:18 pan sshd[914048]: Received disconnect from 51.15.145.170 port 63896:11: Bye Bye [preauth] May 1 10:27:18 pan sshd[914048]: Disconnected from invalid user guest2 51.15.145.170 port 63896 [preauth] May 1 10:28:01 pan systemd[914117]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:29:01 pan systemd[914413]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:29:01 pan systemd[914418]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:29:50 pan sshd[914602]: Invalid user telecomadmin from 51.15.145.170 port 57429 May 1 10:29:50 pan sshd[914602]: pam_unix(sshd:auth): check pass; user unknown May 1 10:29:50 pan sshd[914602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.145.170 May 1 10:29:52 pan sshd[914602]: Failed password for invalid user telecomadmin from 51.15.145.170 port 57429 ssh2 May 1 10:29:54 pan sshd[914602]: Received disconnect from 51.15.145.170 port 57429:11: Bye Bye [preauth] May 1 10:29:54 pan sshd[914602]: Disconnected from invalid user telecomadmin 51.15.145.170 port 57429 [preauth] May 1 10:30:01 pan systemd[914725]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:30:01 pan systemd[914734]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:30:01 pan systemd[914749]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:30:21 pan systemd[914752]: pam_unix(systemd-user:session): session closed for user munin May 1 10:31:01 pan systemd[915545]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:32:01 pan systemd[915638]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:33:01 pan systemd[915766]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:34:01 pan systemd[916020]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:35:01 pan systemd[916209]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:35:01 pan systemd[916223]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:35:01 pan systemd[916231]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:35:55 pan unix_chkpwd[917025]: password check failed for user (root) May 1 10:35:55 pan sshd[917010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.189.13.255 user=root May 1 10:35:58 pan sshd[917010]: Failed password for root from 14.189.13.255 port 40939 ssh2 May 1 10:35:58 pan unix_chkpwd[917035]: password check failed for user (root) May 1 10:36:00 pan sshd[917010]: Failed password for root from 14.189.13.255 port 40939 ssh2 May 1 10:36:01 pan unix_chkpwd[917044]: password check failed for user (root) May 1 10:36:01 pan systemd[917056]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:36:02 pan sshd[917010]: Failed password for root from 14.189.13.255 port 40939 ssh2 May 1 10:36:03 pan unix_chkpwd[917078]: password check failed for user (root) May 1 10:36:05 pan sshd[917010]: Failed password for root from 14.189.13.255 port 40939 ssh2 May 1 10:36:06 pan unix_chkpwd[917086]: password check failed for user (root) May 1 10:36:08 pan sshd[917010]: Failed password for root from 14.189.13.255 port 40939 ssh2 May 1 10:36:08 pan unix_chkpwd[917090]: password check failed for user (root) May 1 10:36:10 pan sshd[917010]: Failed password for root from 14.189.13.255 port 40939 ssh2 May 1 10:36:11 pan sshd[917010]: error: maximum authentication attempts exceeded for root from 14.189.13.255 port 40939 ssh2 [preauth] May 1 10:36:11 pan sshd[917010]: Disconnecting authenticating user root 14.189.13.255 port 40939: Too many authentication failures [preauth] May 1 10:36:11 pan sshd[917010]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.189.13.255 user=root May 1 10:36:11 pan sshd[917010]: PAM service(sshd) ignoring max retries; 6 > 3 May 1 10:37:02 pan systemd[917247]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:37:39 pan sshd[917539]: error: kex_exchange_identification: Connection closed by remote host May 1 10:37:39 pan sshd[917540]: Invalid user yjq from 141.11.21.145 port 62234 May 1 10:37:39 pan sshd[917540]: pam_unix(sshd:auth): check pass; user unknown May 1 10:37:39 pan sshd[917540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.11.21.145 May 1 10:37:42 pan sshd[917540]: Failed password for invalid user yjq from 141.11.21.145 port 62234 ssh2 May 1 10:37:44 pan sshd[917540]: Connection closed by invalid user yjq 141.11.21.145 port 62234 [preauth] May 1 10:38:01 pan systemd[917584]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:39:01 pan systemd[917855]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:39:01 pan systemd[917860]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:40:01 pan systemd[918060]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:40:01 pan systemd[918075]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:40:01 pan systemd[918080]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:41:01 pan systemd[918933]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:41:55 pan sshd[919030]: error: kex_exchange_identification: read: Connection reset by peer May 1 10:41:58 pan sshd[919033]: error: kex_exchange_identification: read: Connection reset by peer May 1 10:41:59 pan sshd[919036]: error: kex_exchange_identification: read: Connection reset by peer May 1 10:42:01 pan systemd[919062]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:42:12 pan systemd[919065]: pam_unix(systemd-user:session): session closed for user bangherangstudio May 1 10:42:47 pan unix_chkpwd[919151]: password check failed for user (root) May 1 10:42:47 pan sshd[919149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.228 user=root May 1 10:42:49 pan sshd[919149]: Failed password for root from 213.209.159.228 port 36768 ssh2 May 1 10:42:49 pan sshd[919149]: Connection closed by authenticating user root 213.209.159.228 port 36768 [preauth] May 1 10:43:01 pan systemd[919190]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:44:01 pan systemd[919433]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:44:01 pan systemd[919437]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:45:01 pan systemd[919616]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:45:01 pan systemd[919631]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:45:01 pan systemd[919637]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:46:01 pan systemd[920444]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:46:21 pan sshd[920494]: error: kex_exchange_identification: Connection closed by remote host May 1 10:46:49 pan unix_chkpwd[920526]: password check failed for user (root) May 1 10:46:49 pan sshd[920522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.172.24 user=root May 1 10:46:51 pan sshd[920522]: Failed password for root from 14.116.172.24 port 36776 ssh2 May 1 10:46:52 pan sshd[920522]: Connection closed by authenticating user root 14.116.172.24 port 36776 [preauth] May 1 10:46:52 pan sshd[920530]: Invalid user ubuntu from 14.116.172.24 port 36782 May 1 10:46:52 pan sshd[920530]: pam_unix(sshd:auth): check pass; user unknown May 1 10:46:52 pan sshd[920530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.172.24 May 1 10:46:54 pan sshd[920530]: Failed password for invalid user ubuntu from 14.116.172.24 port 36782 ssh2 May 1 10:46:55 pan sshd[920540]: Invalid user pensaunpo from 14.116.172.24 port 36796 May 1 10:46:55 pan sshd[920540]: pam_unix(sshd:auth): check pass; user unknown May 1 10:46:55 pan sshd[920540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.172.24 May 1 10:46:56 pan sshd[920530]: Connection closed by invalid user ubuntu 14.116.172.24 port 36782 [preauth] May 1 10:46:57 pan sshd[920540]: Failed password for invalid user pensaunpo from 14.116.172.24 port 36796 ssh2 May 1 10:46:58 pan sshd[920540]: Connection closed by invalid user pensaunpo 14.116.172.24 port 36796 [preauth] May 1 10:47:02 pan systemd[920580]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:47:12 pan systemd[920583]: pam_unix(systemd-user:session): session closed for user bangherangstudio May 1 10:47:47 pan sudo[920692]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 10:47:47 pan systemd[920696]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:47:47 pan sudo[920692]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:47 pan sudo[920692]: pam_unix(sudo:session): session closed for user root May 1 10:47:47 pan sudo[920708]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 10:47:47 pan sudo[920708]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:47 pan sudo[920708]: pam_unix(sudo:session): session closed for user root May 1 10:47:47 pan sudo[920712]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 10:47:47 pan sudo[920712]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:47 pan sudo[920712]: pam_unix(sudo:session): session closed for user root May 1 10:47:47 pan sudo[920716]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 10:47:47 pan sudo[920716]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:47 pan sudo[920716]: pam_unix(sudo:session): session closed for user root May 1 10:47:47 pan sudo[920720]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 10:47:47 pan sudo[920720]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:47 pan sudo[920720]: pam_unix(sudo:session): session closed for user root May 1 10:47:47 pan sudo[920724]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 10:47:47 pan sudo[920724]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:47 pan sudo[920724]: pam_unix(sudo:session): session closed for user root May 1 10:47:50 pan sudo[920735]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 10:47:50 pan sudo[920735]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:50 pan sudo[920735]: pam_unix(sudo:session): session closed for user root May 1 10:47:50 pan sudo[920740]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 10:47:50 pan sudo[920740]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:50 pan sudo[920740]: pam_unix(sudo:session): session closed for user root May 1 10:47:50 pan sudo[920745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 10:47:50 pan sudo[920745]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:51 pan sudo[920745]: pam_unix(sudo:session): session closed for user root May 1 10:47:51 pan sudo[920751]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 10:47:51 pan sudo[920751]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:51 pan sudo[920751]: pam_unix(sudo:session): session closed for user root May 1 10:47:51 pan sudo[920755]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sprn5Q76MxDBT0Ut.~ May 1 10:47:51 pan sudo[920755]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:51 pan sudo[920755]: pam_unix(sudo:session): session closed for user root May 1 10:47:51 pan sudo[920759]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sprn5Q76MxDBT0Ut.~\'' May 1 10:47:51 pan sudo[920759]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:51 pan sudo[920759]: pam_unix(sudo:session): session closed for user root May 1 10:47:51 pan sudo[920764]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sprn5Q76MxDBT0Ut.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 10:47:51 pan sudo[920764]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:51 pan sudo[920764]: pam_unix(sudo:session): session closed for user root May 1 10:47:51 pan sudo[920768]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 10:47:51 pan sudo[920768]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:51 pan sudo[920768]: pam_unix(sudo:session): session closed for user root May 1 10:47:51 pan sudo[920775]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 10:47:51 pan sudo[920775]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:51 pan sudo[920775]: pam_unix(sudo:session): session closed for user root May 1 10:47:51 pan sudo[920781]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 10:47:51 pan sudo[920781]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:51 pan sudo[920781]: pam_unix(sudo:session): session closed for user root May 1 10:47:52 pan sudo[920994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 10:47:52 pan sudo[920994]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 10:47:52 pan sudo[920994]: pam_unix(sudo:session): session closed for user root May 1 10:48:01 pan systemd[921023]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:48:04 pan sshd[921052]: Invalid user itheritage from 114.246.241.87 port 32798 May 1 10:48:04 pan sshd[921052]: pam_unix(sshd:auth): check pass; user unknown May 1 10:48:04 pan sshd[921052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.246.241.87 May 1 10:48:06 pan sshd[921052]: Failed password for invalid user itheritage from 114.246.241.87 port 32798 ssh2 May 1 10:48:08 pan sshd[921052]: Connection closed by invalid user itheritage 114.246.241.87 port 32798 [preauth] May 1 10:48:13 pan unix_chkpwd[921078]: password check failed for user (root) May 1 10:48:13 pan sshd[921076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.236 user=root May 1 10:48:15 pan sshd[921076]: Failed password for root from 213.209.159.236 port 52896 ssh2 May 1 10:48:16 pan sshd[921076]: Connection closed by authenticating user root 213.209.159.236 port 52896 [preauth] May 1 10:49:01 pan systemd[921144]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:50:01 pan systemd[921455]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:50:01 pan systemd[921472]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:50:01 pan systemd[921477]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:51:01 pan systemd[922303]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:52:01 pan systemd[922400]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:52:35 pan sshd[922692]: Received disconnect from 193.46.255.86 port 51372:11: Bye [preauth] May 1 10:52:35 pan sshd[922692]: Disconnected from 193.46.255.86 port 51372 [preauth] May 1 10:53:01 pan systemd[922780]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:54:01 pan systemd[922894]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:55:01 pan systemd[923199]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:55:01 pan systemd[923215]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:55:01 pan systemd[923222]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 10:56:01 pan systemd[924083]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:57:01 pan systemd[924198]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:58:01 pan systemd[924332]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:59:01 pan systemd[924473]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 10:59:01 pan systemd[924478]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 10:59:21 pan sshd[924542]: error: kex_exchange_identification: Connection closed by remote host May 1 11:00:01 pan systemd[924796]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:00:01 pan systemd[924809]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:00:01 pan systemd[924818]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 11:01:01 pan systemd[925642]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:02:01 pan systemd[925754]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:03:01 pan systemd[925916]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:04:01 pan systemd[926045]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:04:01 pan systemd[926049]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:05:01 pan systemd[926372]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:05:01 pan systemd[926384]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:05:01 pan systemd[926392]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 11:06:01 pan systemd[927182]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:07:01 pan systemd[927315]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:08:01 pan systemd[927670]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:09:01 pan systemd[927786]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:09:01 pan systemd[927790]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:10:01 pan systemd[928203]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:10:01 pan systemd[928214]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:10:01 pan systemd[928223]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 11:11:01 pan systemd[929012]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:12:01 pan systemd[929116]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:13:01 pan systemd[929271]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:13:03 pan unix_chkpwd[929297]: password check failed for user (root) May 1 11:13:03 pan sshd[929295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.150.210.199 user=root May 1 11:13:06 pan sshd[929295]: Failed password for root from 93.150.210.199 port 20340 ssh2 May 1 11:13:06 pan unix_chkpwd[929300]: password check failed for user (root) May 1 11:13:08 pan sshd[929295]: Failed password for root from 93.150.210.199 port 20340 ssh2 May 1 11:14:01 pan systemd[929392]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:14:01 pan systemd[929397]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:14:23 pan sshd[929473]: error: kex_exchange_identification: Connection closed by remote host May 1 11:15:01 pan systemd[929584]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:15:01 pan systemd[929596]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:15:01 pan systemd[929607]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 11:16:01 pan systemd[930519]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:17:01 pan systemd[930616]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:18:01 pan systemd[930775]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:19:01 pan systemd[930890]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:19:56 pan sshd[931000]: error: kex_exchange_identification: Connection closed by remote host May 1 11:20:01 pan systemd[931084]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:20:01 pan systemd[931098]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 11:20:01 pan systemd[931104]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:20:08 pan unix_chkpwd[931938]: password check failed for user (root) May 1 11:20:08 pan sshd[931004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.195.221 user=root May 1 11:20:10 pan sshd[931004]: Failed password for root from 14.29.195.221 port 44460 ssh2 May 1 11:20:10 pan sshd[931004]: Connection closed by authenticating user root 14.29.195.221 port 44460 [preauth] May 1 11:20:12 pan unix_chkpwd[931953]: password check failed for user (root) May 1 11:20:12 pan sshd[931949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.195.221 user=root May 1 11:20:13 pan sshd[931949]: Failed password for root from 14.29.195.221 port 48720 ssh2 May 1 11:20:15 pan sshd[931949]: Connection closed by authenticating user root 14.29.195.221 port 48720 [preauth] May 1 11:20:18 pan unix_chkpwd[931979]: password check failed for user (root) May 1 11:20:18 pan sshd[931976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.195.221 user=root May 1 11:20:20 pan sshd[931976]: Failed password for root from 14.29.195.221 port 48736 ssh2 May 1 11:21:01 pan systemd[932067]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:22:01 pan systemd[932161]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:23:01 pan systemd[932550]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:24:01 pan systemd[932682]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:25:01 pan systemd[932855]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:25:01 pan systemd[932874]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:25:01 pan systemd[932875]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 11:25:17 pan sshd[933727]: error: kex_exchange_identification: Connection closed by remote host May 1 11:26:01 pan systemd[933819]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:27:01 pan systemd[933978]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:28:02 pan systemd[934103]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:29:01 pan systemd[934250]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:29:01 pan systemd[934255]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:30:01 pan systemd[934452]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:30:01 pan systemd[934464]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 11:30:01 pan systemd[934473]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:31:01 pan systemd[935403]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:32:01 pan systemd[935525]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:32:55 pan sshd[935609]: Invalid user gialauyacht from 213.209.159.231 port 59992 May 1 11:32:55 pan sshd[935609]: pam_unix(sshd:auth): check pass; user unknown May 1 11:32:55 pan sshd[935609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.231 May 1 11:32:58 pan sshd[935609]: Failed password for invalid user gialauyacht from 213.209.159.231 port 59992 ssh2 May 1 11:32:59 pan sshd[935609]: Connection closed by invalid user gialauyacht 213.209.159.231 port 59992 [preauth] May 1 11:33:01 pan systemd[935636]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:34:01 pan systemd[935764]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:35:01 pan systemd[935938]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 11:35:01 pan systemd[935953]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:35:01 pan systemd[935959]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 11:35:15 pan sshd[936680]: Invalid user test03 from 110.53.68.28 port 62589 May 1 11:35:15 pan sshd[936680]: pam_unix(sshd:auth): check pass; user unknown May 1 11:35:15 pan sshd[936680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.53.68.28 May 1 11:35:17 pan sshd[936680]: Failed password for invalid user test03 from 110.53.68.28 port 62589 ssh2 May 1 11:35:18 pan sshd[936680]: Received disconnect from 110.53.68.28 port 62589:11: Bye Bye [preauth] May 1 11:35:18 pan sshd[936680]: Disconnected from invalid user test03 110.53.68.28 port 62589 [preauth] May 1 11:36:01 pan systemd[936922]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 11:37:01 pan systemd[937043]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:40:23 pan sshd[2823]: Server listening on 0.0.0.0 port 22. May 1 17:40:23 pan sshd[2823]: Server listening on :: port 22. May 1 17:40:23 pan sshd[3453]: error: kex_exchange_identification: Connection closed by remote host May 1 17:40:23 pan sshd[3455]: error: kex_exchange_identification: Connection closed by remote host May 1 17:40:23 pan sshd[3488]: Connection closed by authenticating user root 213.133.124.17 port 38402 [preauth] May 1 17:40:23 pan polkitd[3694]: Loading rules from directory /etc/polkit-1/rules.d May 1 17:40:23 pan polkitd[3694]: Loading rules from directory /usr/share/polkit-1/rules.d May 1 17:40:23 pan polkitd[3694]: Finished loading, compiling and executing 3 rules May 1 17:40:23 pan polkitd[3694]: Acquired the name org.freedesktop.PolicyKit1 on the system bus May 1 17:40:33 pan sshd[11908]: Accepted publickey for root from 212.105.155.26 port 11428 ssh2: RSA SHA256:WA8Uh/k3/V+o4wiLw72WUbH5JIXUyD/P6GFpRyA4tog May 1 17:40:33 pan systemd[11914]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 17:40:33 pan sshd[11908]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 17:41:01 pan systemd[15942]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:41:18 pan sshd[16469]: error: kex_exchange_identification: Connection closed by remote host May 1 17:42:01 pan systemd[16662]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:43:01 pan systemd[17124]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:44:01 pan systemd[17377]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:45:01 pan systemd[17530]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:45:01 pan systemd[17550]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 17:45:30 pan sshd[18311]: Accepted publickey for root from 46.4.50.47 port 47934 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 17:45:30 pan sshd[18311]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 17:46:01 pan systemd[18787]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:47:01 pan systemd[20132]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:47:09 pan unix_chkpwd[20179]: password check failed for user (root) May 1 17:47:09 pan sshd[20177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.225 user=root May 1 17:47:11 pan sshd[20177]: Failed password for root from 213.209.159.225 port 58848 ssh2 May 1 17:47:13 pan sshd[20177]: Connection closed by authenticating user root 213.209.159.225 port 58848 [preauth] May 1 17:47:23 pan sudo[20398]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 17:47:23 pan sudo[20398]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:23 pan sudo[20398]: pam_unix(sudo:session): session closed for user root May 1 17:47:23 pan sudo[20402]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 17:47:23 pan sudo[20402]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:23 pan sudo[20402]: pam_unix(sudo:session): session closed for user root May 1 17:47:23 pan sudo[20406]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 17:47:23 pan sudo[20406]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:23 pan sudo[20406]: pam_unix(sudo:session): session closed for user root May 1 17:47:23 pan sudo[20413]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 17:47:23 pan sudo[20413]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:23 pan sudo[20413]: pam_unix(sudo:session): session closed for user root May 1 17:47:23 pan sudo[20419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 17:47:23 pan sudo[20419]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:23 pan sudo[20419]: pam_unix(sudo:session): session closed for user root May 1 17:47:23 pan sudo[20423]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 17:47:23 pan sudo[20423]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:23 pan sudo[20423]: pam_unix(sudo:session): session closed for user root May 1 17:47:24 pan sudo[20446]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 17:47:24 pan sudo[20446]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:24 pan sudo[20446]: pam_unix(sudo:session): session closed for user root May 1 17:47:24 pan sudo[20452]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 17:47:24 pan sudo[20452]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:24 pan sudo[20452]: pam_unix(sudo:session): session closed for user root May 1 17:47:24 pan sudo[20457]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 17:47:24 pan sudo[20457]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:24 pan sudo[20457]: pam_unix(sudo:session): session closed for user root May 1 17:47:24 pan sudo[20462]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:24 pan systemd[20466]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:47:24 pan sudo[20462]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:24 pan sudo[20462]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:24 pan sudo[20484]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:24 pan sudo[20484]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:24 pan sudo[20484]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:24 pan sudo[20513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=ortart.villasilvia.it return_https_redirect_status=1 --output=json' May 1 17:47:24 pan sudo[20513]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:24 pan sudo[20513]: pam_unix(sudo:session): session closed for user root May 1 17:47:24 pan sudo[20519]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio Mime list_redirects --output=json' May 1 17:47:24 pan sudo[20519]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:25 pan sudo[20519]: pam_unix(sudo:session): session closed for user root May 1 17:47:25 pan sudo[20554]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20554]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20554]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20567]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20567]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20567]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20577]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20577]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20577]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20587]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20587]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20587]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20597]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20597]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20597]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20607]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20607]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20607]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20617]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20617]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20617]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20627]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20627]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20627]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20637]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20637]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20637]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20647]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:25 pan sudo[20647]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:25 pan sudo[20647]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:25 pan sudo[20676]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=caffediportacastello.it return_https_redirect_status=1 --output=json' May 1 17:47:25 pan sudo[20676]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:25 pan sudo[20676]: pam_unix(sudo:session): session closed for user root May 1 17:47:26 pan sudo[20714]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20714]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20714]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:26 pan sudo[20745]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=parquettistanapoli.it return_https_redirect_status=1 --output=json' May 1 17:47:26 pan sudo[20745]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:26 pan sudo[20745]: pam_unix(sudo:session): session closed for user root May 1 17:47:26 pan sudo[20784]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20784]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20784]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:26 pan sudo[20794]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20794]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20794]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:26 pan sudo[20805]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20805]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20805]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:26 pan sudo[20815]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20815]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20815]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:26 pan sudo[20825]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20825]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20825]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:26 pan sudo[20834]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20834]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20834]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:26 pan sudo[20848]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20848]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20848]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:26 pan sudo[20859]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20859]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20859]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:26 pan sudo[20869]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:26 pan sudo[20869]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:26 pan sudo[20869]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:27 pan sudo[20897]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=fisiosteel.it return_https_redirect_status=1 --output=json' May 1 17:47:27 pan sudo[20897]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:27 pan sudo[20897]: pam_unix(sudo:session): session closed for user root May 1 17:47:27 pan sudo[20968]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:27 pan sudo[20968]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:27 pan sudo[20968]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:27 pan sudo[20981]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:27 pan sudo[20981]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:27 pan sudo[20981]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:27 pan sudo[20993]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:27 pan sudo[20993]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:27 pan sudo[20993]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:27 pan sudo[21007]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:27 pan sudo[21007]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:27 pan sudo[21007]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:27 pan sudo[21020]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:27 pan sudo[21020]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:27 pan sudo[21020]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:27 pan sudo[21032]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:27 pan sudo[21032]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:27 pan sudo[21032]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:27 pan sudo[21103]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=vidama.it return_https_redirect_status=1 --output=json' May 1 17:47:27 pan sudo[21103]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:28 pan sudo[21103]: pam_unix(sudo:session): session closed for user root May 1 17:47:28 pan sudo[21180]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:28 pan sudo[21180]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:28 pan sudo[21180]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:28 pan sudo[21190]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:28 pan sudo[21190]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:28 pan sudo[21190]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:28 pan sudo[21199]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:28 pan sudo[21199]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:28 pan sudo[21199]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:28 pan sudo[21223]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bangherangstudio DomainInfo single_domain_data domain=v2.paladeri.it return_https_redirect_status=1 --output=json' May 1 17:47:28 pan sudo[21223]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:28 pan sudo[21223]: pam_unix(sudo:session): session closed for user root May 1 17:47:28 pan sudo[21255]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:28 pan sudo[21255]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:28 pan sudo[21255]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:28 pan sudo[21265]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bangherangstudio ; COMMAND=/bin/test -e /home/bangherangstudio/wordpress-backups May 1 17:47:28 pan sudo[21265]: pam_unix(sudo:session): session opened for user bangherangstudio by (uid=979) May 1 17:47:28 pan sudo[21265]: pam_unix(sudo:session): session closed for user bangherangstudio May 1 17:47:28 pan sudo[21275]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json May 1 17:47:28 pan sudo[21275]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:28 pan sudo[21275]: pam_unix(sudo:session): session closed for user root May 1 17:47:28 pan sudo[21285]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 17:47:28 pan sudo[21285]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:28 pan sudo[21285]: pam_unix(sudo:session): session closed for user root May 1 17:47:28 pan sudo[21290]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 17:47:28 pan sudo[21290]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:28 pan sudo[21290]: pam_unix(sudo:session): session closed for user root May 1 17:47:30 pan sudo[21338]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 17:47:30 pan sudo[21338]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:30 pan sudo[21338]: pam_unix(sudo:session): session closed for user root May 1 17:47:30 pan sudo[21342]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R9koCqk5kX48eKKl.~ May 1 17:47:30 pan sudo[21342]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:30 pan sudo[21342]: pam_unix(sudo:session): session closed for user root May 1 17:47:30 pan sudo[21346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R9koCqk5kX48eKKl.~\'' May 1 17:47:30 pan sudo[21346]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:30 pan sudo[21346]: pam_unix(sudo:session): session closed for user root May 1 17:47:30 pan sudo[21351]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R9koCqk5kX48eKKl.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 17:47:30 pan sudo[21351]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:30 pan sudo[21351]: pam_unix(sudo:session): session closed for user root May 1 17:47:30 pan sudo[21355]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 17:47:30 pan sudo[21355]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:30 pan sudo[21355]: pam_unix(sudo:session): session closed for user root May 1 17:47:30 pan sudo[21360]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_licenses --output=json' May 1 17:47:30 pan sudo[21360]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:30 pan sudo[21360]: pam_unix(sudo:session): session closed for user root May 1 17:47:31 pan sudo[21375]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 17:47:31 pan sudo[21375]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:31 pan sudo[21375]: pam_unix(sudo:session): session closed for user root May 1 17:47:31 pan sudo[21380]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 17:47:31 pan sudo[21380]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:31 pan sudo[21380]: pam_unix(sudo:session): session closed for user root May 1 17:47:31 pan sudo[21395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 17:47:31 pan sudo[21395]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:47:31 pan sudo[21395]: pam_unix(sudo:session): session closed for user root May 1 17:48:01 pan systemd[22208]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:49:01 pan systemd[22629]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:50:01 pan systemd[22792]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:50:01 pan systemd[22809]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 17:51:01 pan systemd[23589]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:52:01 pan systemd[23817]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:53:01 pan systemd[24045]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:54:01 pan systemd[24156]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:55:01 pan systemd[24504]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:55:01 pan systemd[24509]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 17:55:33 pan sudo[25289]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 17:55:33 pan sudo[25289]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:55:33 pan sudo[25289]: pam_unix(sudo:session): session closed for user root May 1 17:55:33 pan sudo[25294]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 17:55:33 pan sudo[25294]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:55:33 pan sudo[25294]: pam_unix(sudo:session): session closed for user root May 1 17:55:33 pan sudo[25300]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 17:55:33 pan sudo[25300]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 17:55:33 pan sudo[25300]: pam_unix(sudo:session): session closed for user root May 1 17:56:01 pan systemd[25344]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:57:01 pan systemd[25524]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:58:01 pan systemd[25789]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 17:59:01 pan systemd[48391]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:00:01 pan systemd[64893]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:00:01 pan systemd[64912]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:01:01 pan systemd[65965]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:02:01 pan systemd[66077]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:03:01 pan systemd[66304]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:03:09 pan unix_chkpwd[66336]: password check failed for user (root) May 1 18:03:09 pan sshd[66334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.203.174 user=root May 1 18:03:11 pan sshd[66334]: Failed password for root from 43.156.203.174 port 34414 ssh2 May 1 18:03:11 pan sshd[66334]: Connection closed by authenticating user root 43.156.203.174 port 34414 [preauth] May 1 18:03:12 pan sshd[66344]: Invalid user test from 43.156.203.174 port 59876 May 1 18:03:13 pan sshd[66344]: pam_unix(sshd:auth): check pass; user unknown May 1 18:03:13 pan sshd[66344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.203.174 May 1 18:03:15 pan sshd[66344]: Failed password for invalid user test from 43.156.203.174 port 59876 ssh2 May 1 18:03:16 pan sshd[66344]: Connection closed by invalid user test 43.156.203.174 port 59876 [preauth] May 1 18:03:18 pan sshd[66352]: Invalid user git from 43.156.203.174 port 59888 May 1 18:03:18 pan sshd[66352]: pam_unix(sshd:auth): check pass; user unknown May 1 18:03:18 pan sshd[66352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.203.174 May 1 18:03:20 pan sshd[66352]: Failed password for invalid user git from 43.156.203.174 port 59888 ssh2 May 1 18:03:20 pan sshd[66352]: Connection closed by invalid user git 43.156.203.174 port 59888 [preauth] May 1 18:03:21 pan sshd[66356]: Invalid user ubuntu from 43.156.203.174 port 47404 May 1 18:03:21 pan sshd[66356]: pam_unix(sshd:auth): check pass; user unknown May 1 18:03:21 pan sshd[66356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.203.174 May 1 18:03:24 pan sshd[66356]: Failed password for invalid user ubuntu from 43.156.203.174 port 47404 ssh2 May 1 18:04:01 pan systemd[66457]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:05:01 pan systemd[66634]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:05:01 pan systemd[66641]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:05:45 pan sudo[67426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 18:05:45 pan sudo[67426]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:05:45 pan sudo[67426]: pam_unix(sudo:session): session closed for user root May 1 18:05:45 pan sudo[67431]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 18:05:45 pan sudo[67431]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:05:46 pan sudo[67431]: pam_unix(sudo:session): session closed for user root May 1 18:05:46 pan sudo[67436]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 18:05:46 pan sudo[67436]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:05:46 pan sudo[67436]: pam_unix(sudo:session): session closed for user root May 1 18:06:01 pan systemd[67467]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:06:21 pan sshd[67519]: error: kex_exchange_identification: read: Connection reset by peer May 1 18:07:01 pan systemd[67629]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:08:01 pan systemd[67870]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:09:01 pan systemd[67960]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:09:18 pan sshd[68003]: Invalid user pensaunpo from 213.209.159.235 port 37720 May 1 18:09:18 pan sshd[68003]: pam_unix(sshd:auth): check pass; user unknown May 1 18:09:18 pan sshd[68003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.235 May 1 18:09:20 pan sshd[68003]: Failed password for invalid user pensaunpo from 213.209.159.235 port 37720 ssh2 May 1 18:09:20 pan sshd[68003]: Connection closed by invalid user pensaunpo 213.209.159.235 port 37720 [preauth] May 1 18:10:02 pan systemd[68293]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:10:02 pan systemd[68309]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:11:01 pan systemd[69078]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:12:01 pan systemd[69191]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:12:10 pan sshd[69222]: Invalid user server from 14.103.123.67 port 22310 May 1 18:12:10 pan sshd[69222]: pam_unix(sshd:auth): check pass; user unknown May 1 18:12:10 pan sshd[69222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.123.67 May 1 18:12:12 pan sshd[69222]: Failed password for invalid user server from 14.103.123.67 port 22310 ssh2 May 1 18:12:14 pan sshd[69222]: Received disconnect from 14.103.123.67 port 22310:11: Bye Bye [preauth] May 1 18:12:14 pan sshd[69222]: Disconnected from invalid user server 14.103.123.67 port 22310 [preauth] May 1 18:12:48 pan sshd[69398]: error: kex_exchange_identification: Connection closed by remote host May 1 18:13:01 pan systemd[69424]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:14:01 pan systemd[69509]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:14:43 pan sshd[69575]: Accepted publickey for root from 46.4.168.178 port 39994 ssh2: RSA SHA256:RB7nCR2Af5j2ljsKYQfTxZNGUkjxb2g3NHwlJOD+usk May 1 18:14:43 pan sshd[69575]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:14:44 pan sshd[69581]: Received disconnect from 46.4.168.178 port 39994:11: disconnected by user May 1 18:14:44 pan sshd[69581]: Disconnected from user root 46.4.168.178 port 39994 May 1 18:14:44 pan sshd[69575]: pam_unix(sshd:session): session closed for user root May 1 18:14:53 pan sshd[69532]: error: kex_exchange_identification: read: Connection reset by peer May 1 18:15:01 pan systemd[70039]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:15:01 pan systemd[70064]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:16:01 pan systemd[70821]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:16:18 pan sshd[70877]: Accepted publickey for root from 46.4.168.178 port 59018 ssh2: RSA SHA256:RB7nCR2Af5j2ljsKYQfTxZNGUkjxb2g3NHwlJOD+usk May 1 18:16:18 pan sshd[70877]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:16:19 pan sshd[70880]: Received disconnect from 46.4.168.178 port 59018:11: disconnected by user May 1 18:16:19 pan sshd[70880]: Disconnected from user root 46.4.168.178 port 59018 May 1 18:16:19 pan sshd[70877]: pam_unix(sshd:session): session closed for user root May 1 18:16:54 pan unix_chkpwd[71340]: password check failed for user (root) May 1 18:16:54 pan sshd[71329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.123.67 user=root May 1 18:16:56 pan sshd[71329]: Failed password for root from 14.103.123.67 port 51376 ssh2 May 1 18:16:56 pan sshd[71329]: Received disconnect from 14.103.123.67 port 51376:11: Bye Bye [preauth] May 1 18:16:56 pan sshd[71329]: Disconnected from authenticating user root 14.103.123.67 port 51376 [preauth] May 1 18:17:01 pan systemd[71358]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:18:01 pan systemd[71628]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:19:01 pan systemd[71734]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:20:01 pan systemd[71942]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:20:01 pan systemd[71953]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:20:06 pan sshd[72019]: Invalid user dockeradmin from 14.103.123.67 port 26906 May 1 18:20:06 pan sshd[72019]: pam_unix(sshd:auth): check pass; user unknown May 1 18:20:06 pan sshd[72019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.123.67 May 1 18:20:08 pan sshd[72019]: Failed password for invalid user dockeradmin from 14.103.123.67 port 26906 ssh2 May 1 18:21:01 pan systemd[72743]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:21:18 pan sshd[18314]: Received disconnect from 46.4.50.47 port 47934:11: disconnected by user May 1 18:21:18 pan sshd[18314]: Disconnected from user root 46.4.50.47 port 47934 May 1 18:21:18 pan sshd[18311]: pam_unix(sshd:session): session closed for user root May 1 18:22:01 pan systemd[72852]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:23:01 pan systemd[73070]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:23:21 pan sshd[73118]: Accepted publickey for root from 46.4.50.47 port 52098 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:23:21 pan sshd[73118]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:23:46 pan sshd[73122]: Received disconnect from 46.4.50.47 port 52098:11: disconnected by user May 1 18:23:46 pan sshd[73122]: Disconnected from user root 46.4.50.47 port 52098 May 1 18:23:46 pan sshd[73118]: pam_unix(sshd:session): session closed for user root May 1 18:23:46 pan sshd[73521]: Accepted publickey for root from 46.4.50.47 port 46726 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:23:46 pan sshd[73521]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:23:49 pan sshd[73524]: Received disconnect from 46.4.50.47 port 46726:11: disconnected by user May 1 18:23:49 pan sshd[73524]: Disconnected from user root 46.4.50.47 port 46726 May 1 18:23:49 pan sshd[73521]: pam_unix(sshd:session): session closed for user root May 1 18:23:50 pan sshd[73914]: Accepted publickey for root from 46.4.50.47 port 46728 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:23:50 pan sshd[73914]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:23:50 pan sshd[73918]: Received disconnect from 46.4.50.47 port 46728:11: disconnected by user May 1 18:23:50 pan sshd[73918]: Disconnected from user root 46.4.50.47 port 46728 May 1 18:23:50 pan sshd[73914]: pam_unix(sshd:session): session closed for user root May 1 18:23:50 pan sshd[74298]: Accepted publickey for root from 46.4.50.47 port 46742 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:23:50 pan sshd[74298]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:24:01 pan systemd[74699]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:24:13 pan sshd[74301]: Received disconnect from 46.4.50.47 port 46742:11: disconnected by user May 1 18:24:13 pan sshd[74301]: Disconnected from user root 46.4.50.47 port 46742 May 1 18:24:13 pan sshd[74298]: pam_unix(sshd:session): session closed for user root May 1 18:24:13 pan sshd[74734]: Accepted publickey for root from 46.4.50.47 port 46690 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:24:13 pan sshd[74734]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:24:34 pan sshd[74738]: Received disconnect from 46.4.50.47 port 46690:11: disconnected by user May 1 18:24:34 pan sshd[74738]: Disconnected from user root 46.4.50.47 port 46690 May 1 18:24:34 pan sshd[74734]: pam_unix(sshd:session): session closed for user root May 1 18:24:34 pan sshd[75318]: Accepted publickey for root from 46.4.50.47 port 58918 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:24:34 pan sshd[75318]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:24:35 pan sshd[75321]: Received disconnect from 46.4.50.47 port 58918:11: disconnected by user May 1 18:24:35 pan sshd[75321]: Disconnected from user root 46.4.50.47 port 58918 May 1 18:24:35 pan sshd[75318]: pam_unix(sshd:session): session closed for user root May 1 18:24:35 pan sshd[75700]: Accepted publickey for root from 46.4.50.47 port 58932 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:24:35 pan sshd[75700]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:25:01 pan systemd[76169]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:25:01 pan systemd[76177]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:25:15 pan sshd[75704]: Received disconnect from 46.4.50.47 port 58932:11: disconnected by user May 1 18:25:15 pan sshd[75704]: Disconnected from user root 46.4.50.47 port 58932 May 1 18:25:15 pan sshd[75700]: pam_unix(sshd:session): session closed for user root May 1 18:25:15 pan sshd[76884]: Accepted publickey for root from 46.4.50.47 port 49740 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:25:15 pan sshd[76884]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:25:17 pan sshd[76887]: Received disconnect from 46.4.50.47 port 49740:11: disconnected by user May 1 18:25:17 pan sshd[76887]: Disconnected from user root 46.4.50.47 port 49740 May 1 18:25:17 pan sshd[76884]: pam_unix(sshd:session): session closed for user root May 1 18:25:17 pan sshd[77264]: Accepted publickey for root from 46.4.50.47 port 49756 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:25:17 pan sshd[77264]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:25:17 pan sshd[77267]: Received disconnect from 46.4.50.47 port 49756:11: disconnected by user May 1 18:25:17 pan sshd[77267]: Disconnected from user root 46.4.50.47 port 49756 May 1 18:25:17 pan sshd[77264]: pam_unix(sshd:session): session closed for user root May 1 18:25:17 pan sshd[77644]: Accepted publickey for root from 46.4.50.47 port 49772 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:25:17 pan sshd[77644]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:25:17 pan sshd[77647]: Received disconnect from 46.4.50.47 port 49772:11: disconnected by user May 1 18:25:17 pan sshd[77647]: Disconnected from user root 46.4.50.47 port 49772 May 1 18:25:17 pan sshd[77644]: pam_unix(sshd:session): session closed for user root May 1 18:25:18 pan sshd[78024]: Accepted publickey for root from 46.4.50.47 port 49786 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:25:18 pan sshd[78024]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:26:01 pan systemd[78476]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:27:01 pan systemd[78595]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:28:01 pan systemd[78807]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:29:01 pan systemd[78991]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:30:01 pan systemd[79139]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:30:01 pan systemd[79146]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:31:01 pan systemd[79929]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:32:01 pan systemd[80050]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:33:01 pan systemd[80259]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:34:01 pan systemd[80337]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:34:12 pan sshd[80385]: Accepted publickey for root from 46.4.50.47 port 55952 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:34:12 pan sshd[80385]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:34:56 pan sshd[11926]: Received disconnect from 212.105.155.26 port 11428:11: disconnected by user May 1 18:34:56 pan sshd[11926]: Disconnected from user root 212.105.155.26 port 11428 May 1 18:34:56 pan sshd[11908]: pam_unix(sshd:session): session closed for user root May 1 18:35:01 pan systemd[80943]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:35:01 pan systemd[80955]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:36:01 pan systemd[81840]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:37:01 pan systemd[81953]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:37:52 pan sshd[82047]: error: kex_exchange_identification: read: Connection reset by peer May 1 18:37:55 pan sshd[82049]: error: kex_exchange_identification: read: Connection reset by peer May 1 18:37:59 pan sshd[82053]: error: kex_exchange_identification: read: Connection reset by peer May 1 18:38:01 pan systemd[82073]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:39:01 pan systemd[82297]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:40:01 pan systemd[82650]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:40:01 pan systemd[82660]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:41:01 pan systemd[83510]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:42:01 pan systemd[83616]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:42:32 pan unix_chkpwd[83670]: password check failed for user (root) May 1 18:42:32 pan sshd[83668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.236 user=root May 1 18:42:35 pan sshd[83668]: Failed password for root from 213.209.159.236 port 54950 ssh2 May 1 18:42:37 pan sshd[83668]: Connection closed by authenticating user root 213.209.159.236 port 54950 [preauth] May 1 18:43:01 pan systemd[83724]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:44:01 pan systemd[83941]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:45:01 pan systemd[84074]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:45:01 pan systemd[84093]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:46:01 pan systemd[84860]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:47:01 pan systemd[85061]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:47:23 pan sudo[85137]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 18:47:23 pan sudo[85137]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:23 pan sudo[85137]: pam_unix(sudo:session): session closed for user root May 1 18:47:23 pan sudo[85141]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 18:47:23 pan sudo[85141]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:23 pan sudo[85141]: pam_unix(sudo:session): session closed for user root May 1 18:47:23 pan sudo[85145]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 18:47:23 pan sudo[85145]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:23 pan sudo[85145]: pam_unix(sudo:session): session closed for user root May 1 18:47:23 pan sudo[85149]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 18:47:23 pan sudo[85149]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:23 pan sudo[85149]: pam_unix(sudo:session): session closed for user root May 1 18:47:23 pan sudo[85153]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 18:47:23 pan sudo[85153]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:23 pan sudo[85153]: pam_unix(sudo:session): session closed for user root May 1 18:47:23 pan sudo[85157]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 18:47:23 pan sudo[85157]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:23 pan sudo[85157]: pam_unix(sudo:session): session closed for user root May 1 18:47:23 pan sudo[85171]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 18:47:23 pan sudo[85171]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:23 pan sudo[85171]: pam_unix(sudo:session): session closed for user root May 1 18:47:23 pan sudo[85176]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 18:47:23 pan sudo[85176]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:24 pan sudo[85176]: pam_unix(sudo:session): session closed for user root May 1 18:47:24 pan sudo[85182]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 18:47:24 pan sudo[85182]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:24 pan sudo[85182]: pam_unix(sudo:session): session closed for user root May 1 18:47:24 pan sudo[85187]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 18:47:24 pan sudo[85187]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:24 pan sudo[85187]: pam_unix(sudo:session): session closed for user root May 1 18:47:24 pan sudo[85191]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-guoBG8SIHb1fSqMM.~ May 1 18:47:24 pan sudo[85191]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:24 pan sudo[85191]: pam_unix(sudo:session): session closed for user root May 1 18:47:24 pan sudo[85195]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-guoBG8SIHb1fSqMM.~\'' May 1 18:47:24 pan sudo[85195]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:24 pan sudo[85195]: pam_unix(sudo:session): session closed for user root May 1 18:47:24 pan sudo[85200]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-guoBG8SIHb1fSqMM.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 18:47:24 pan sudo[85200]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:24 pan sudo[85200]: pam_unix(sudo:session): session closed for user root May 1 18:47:24 pan sudo[85204]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 18:47:24 pan sudo[85204]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:24 pan sudo[85204]: pam_unix(sudo:session): session closed for user root May 1 18:47:24 pan sudo[85210]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 18:47:24 pan sudo[85210]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:24 pan sudo[85210]: pam_unix(sudo:session): session closed for user root May 1 18:47:24 pan sudo[85215]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 18:47:24 pan sudo[85215]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:24 pan sudo[85215]: pam_unix(sudo:session): session closed for user root May 1 18:47:25 pan sudo[85426]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 18:47:25 pan sudo[85426]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 18:47:25 pan sudo[85426]: pam_unix(sudo:session): session closed for user root May 1 18:47:43 pan sshd[85459]: error: kex_exchange_identification: Connection closed by remote host May 1 18:48:01 pan systemd[85492]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:49:01 pan systemd[85797]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:49:06 pan sshd[78028]: Received disconnect from 46.4.50.47 port 49786:11: disconnected by user May 1 18:49:06 pan sshd[78028]: Disconnected from user root 46.4.50.47 port 49786 May 1 18:49:06 pan sshd[78024]: pam_unix(sshd:session): session closed for user root May 1 18:49:06 pan sshd[85827]: Accepted publickey for root from 46.4.50.47 port 40234 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:49:06 pan sshd[85827]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:49:17 pan unix_chkpwd[86219]: password check failed for user (root) May 1 18:49:17 pan sshd[86217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.225 user=root May 1 18:49:19 pan sshd[86217]: Failed password for root from 213.209.159.225 port 46142 ssh2 May 1 18:49:19 pan sshd[86217]: Connection closed by authenticating user root 213.209.159.225 port 46142 [preauth] May 1 18:49:20 pan sshd[85830]: Received disconnect from 46.4.50.47 port 40234:11: disconnected by user May 1 18:49:20 pan sshd[85830]: Disconnected from user root 46.4.50.47 port 40234 May 1 18:49:20 pan sshd[85827]: pam_unix(sshd:session): session closed for user root May 1 18:49:20 pan sshd[86235]: Accepted publickey for root from 46.4.50.47 port 59146 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:49:20 pan sshd[86235]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:50:01 pan systemd[86880]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:50:01 pan systemd[86893]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:51:01 pan systemd[87656]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:52:01 pan systemd[87809]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:52:54 pan sshd[86238]: Received disconnect from 46.4.50.47 port 59146:11: disconnected by user May 1 18:52:54 pan sshd[86238]: Disconnected from user root 46.4.50.47 port 59146 May 1 18:52:54 pan sshd[86235]: pam_unix(sshd:session): session closed for user root May 1 18:52:54 pan sshd[87903]: Accepted publickey for root from 46.4.50.47 port 43986 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:52:54 pan sshd[87903]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:52:55 pan sshd[87906]: Received disconnect from 46.4.50.47 port 43986:11: disconnected by user May 1 18:52:55 pan sshd[87906]: Disconnected from user root 46.4.50.47 port 43986 May 1 18:52:55 pan sshd[87903]: pam_unix(sshd:session): session closed for user root May 1 18:52:56 pan sshd[88287]: Accepted publickey for root from 46.4.50.47 port 43996 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:52:56 pan sshd[88287]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:53:01 pan systemd[88681]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:54:01 pan systemd[88904]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:55:01 pan systemd[89234]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 18:55:01 pan systemd[89242]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:55:32 pan unix_chkpwd[89977]: password check failed for user (root) May 1 18:55:32 pan sshd[89971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.228.201 user=root May 1 18:55:34 pan sshd[89971]: Failed password for root from 101.36.228.201 port 55688 ssh2 May 1 18:55:35 pan sshd[89971]: Connection closed by authenticating user root 101.36.228.201 port 55688 [preauth] May 1 18:55:36 pan unix_chkpwd[89984]: password check failed for user (root) May 1 18:55:36 pan sshd[89981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.228.201 user=root May 1 18:55:38 pan sshd[89981]: Failed password for root from 101.36.228.201 port 39760 ssh2 May 1 18:55:39 pan sshd[89981]: Connection closed by authenticating user root 101.36.228.201 port 39760 [preauth] May 1 18:55:41 pan unix_chkpwd[89992]: password check failed for user (root) May 1 18:55:41 pan sshd[89989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.228.201 user=root May 1 18:55:43 pan sshd[89989]: Failed password for root from 101.36.228.201 port 45662 ssh2 May 1 18:56:01 pan systemd[90054]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:56:09 pan sshd[88290]: Received disconnect from 46.4.50.47 port 43996:11: disconnected by user May 1 18:56:09 pan sshd[88290]: Disconnected from user root 46.4.50.47 port 43996 May 1 18:56:09 pan sshd[88287]: pam_unix(sshd:session): session closed for user root May 1 18:56:09 pan sshd[90085]: Accepted publickey for root from 46.4.50.47 port 56200 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:56:09 pan sshd[90085]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:56:47 pan sshd[90088]: Received disconnect from 46.4.50.47 port 56200:11: disconnected by user May 1 18:56:47 pan sshd[90088]: Disconnected from user root 46.4.50.47 port 56200 May 1 18:56:47 pan sshd[90085]: pam_unix(sshd:session): session closed for user root May 1 18:56:47 pan sshd[90504]: Accepted publickey for root from 46.4.50.47 port 36588 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:56:47 pan sshd[90504]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:56:54 pan sshd[90507]: Received disconnect from 46.4.50.47 port 36588:11: disconnected by user May 1 18:56:54 pan sshd[90507]: Disconnected from user root 46.4.50.47 port 36588 May 1 18:56:54 pan sshd[90504]: pam_unix(sshd:session): session closed for user root May 1 18:56:54 pan sshd[90891]: Accepted publickey for root from 46.4.50.47 port 56822 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:56:54 pan sshd[90891]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:56:55 pan sshd[90888]: Invalid user gialauyacht from 58.37.169.153 port 37318 May 1 18:56:56 pan sshd[90888]: pam_unix(sshd:auth): check pass; user unknown May 1 18:56:56 pan sshd[90888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.37.169.153 May 1 18:56:57 pan sshd[90888]: Failed password for invalid user gialauyacht from 58.37.169.153 port 37318 ssh2 May 1 18:56:58 pan sshd[90888]: Connection closed by invalid user gialauyacht 58.37.169.153 port 37318 [preauth] May 1 18:57:01 pan systemd[91287]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:57:21 pan sshd[91343]: Invalid user pensaunpo from 213.209.159.226 port 45404 May 1 18:57:21 pan sshd[91343]: pam_unix(sshd:auth): check pass; user unknown May 1 18:57:21 pan sshd[91343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.226 May 1 18:57:23 pan sshd[91343]: Failed password for invalid user pensaunpo from 213.209.159.226 port 45404 ssh2 May 1 18:57:24 pan sshd[90894]: Received disconnect from 46.4.50.47 port 56822:11: disconnected by user May 1 18:57:24 pan sshd[90894]: Disconnected from user root 46.4.50.47 port 56822 May 1 18:57:24 pan sshd[90891]: pam_unix(sshd:session): session closed for user root May 1 18:57:24 pan sshd[91347]: Accepted publickey for root from 46.4.50.47 port 41784 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:57:24 pan sshd[91347]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:57:24 pan sshd[91343]: Connection closed by invalid user pensaunpo 213.209.159.226 port 45404 [preauth] May 1 18:57:25 pan sshd[91350]: Received disconnect from 46.4.50.47 port 41784:11: disconnected by user May 1 18:57:25 pan sshd[91350]: Disconnected from user root 46.4.50.47 port 41784 May 1 18:57:25 pan sshd[91347]: pam_unix(sshd:session): session closed for user root May 1 18:57:25 pan sshd[91727]: Accepted publickey for root from 46.4.50.47 port 41790 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:57:25 pan sshd[91727]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:57:25 pan sshd[91730]: Received disconnect from 46.4.50.47 port 41790:11: disconnected by user May 1 18:57:25 pan sshd[91730]: Disconnected from user root 46.4.50.47 port 41790 May 1 18:57:25 pan sshd[91727]: pam_unix(sshd:session): session closed for user root May 1 18:57:25 pan sshd[92108]: Accepted publickey for root from 46.4.50.47 port 41792 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:57:25 pan sshd[92108]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:57:35 pan unix_chkpwd[92496]: password check failed for user (root) May 1 18:57:35 pan sshd[90883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.37.169.153 user=root May 1 18:57:38 pan sshd[90883]: Failed password for root from 58.37.169.153 port 37298 ssh2 May 1 18:57:38 pan sshd[90883]: Connection closed by authenticating user root 58.37.169.153 port 37298 [preauth] May 1 18:57:42 pan sshd[92112]: Received disconnect from 46.4.50.47 port 41792:11: disconnected by user May 1 18:57:42 pan sshd[92112]: Disconnected from user root 46.4.50.47 port 41792 May 1 18:57:42 pan sshd[92108]: pam_unix(sshd:session): session closed for user root May 1 18:57:42 pan sshd[92500]: Accepted publickey for root from 46.4.50.47 port 44074 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 18:57:42 pan sshd[92500]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 18:58:01 pan systemd[92902]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 18:59:01 pan systemd[93123]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:00:01 pan systemd[93304]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:00:01 pan systemd[93324]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:00:04 pan sshd[92504]: Received disconnect from 46.4.50.47 port 44074:11: disconnected by user May 1 19:00:04 pan sshd[92504]: Disconnected from user root 46.4.50.47 port 44074 May 1 19:00:04 pan sshd[92500]: pam_unix(sshd:session): session closed for user root May 1 19:00:04 pan sshd[93445]: Accepted publickey for root from 46.4.50.47 port 41940 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:00:04 pan sshd[93445]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:00:50 pan sshd[93467]: Received disconnect from 46.4.50.47 port 41940:11: disconnected by user May 1 19:00:50 pan sshd[93467]: Disconnected from user root 46.4.50.47 port 41940 May 1 19:00:50 pan sshd[93445]: pam_unix(sshd:session): session closed for user root May 1 19:00:50 pan sshd[94485]: Accepted publickey for root from 46.4.50.47 port 43018 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:00:50 pan sshd[94485]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:00:50 pan sshd[94490]: Received disconnect from 46.4.50.47 port 43018:11: disconnected by user May 1 19:00:50 pan sshd[94490]: Disconnected from user root 46.4.50.47 port 43018 May 1 19:00:50 pan sshd[94485]: pam_unix(sshd:session): session closed for user root May 1 19:00:50 pan sshd[94867]: Accepted publickey for root from 46.4.50.47 port 43034 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:00:50 pan sshd[94867]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:01:01 pan systemd[95286]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:01:57 pan sshd[94871]: Received disconnect from 46.4.50.47 port 43034:11: disconnected by user May 1 19:01:57 pan sshd[94871]: Disconnected from user root 46.4.50.47 port 43034 May 1 19:01:57 pan sshd[94867]: pam_unix(sshd:session): session closed for user root May 1 19:01:57 pan sshd[95414]: Accepted publickey for root from 46.4.50.47 port 46100 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:01:57 pan sshd[95414]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:01:58 pan sshd[95417]: Received disconnect from 46.4.50.47 port 46100:11: disconnected by user May 1 19:01:58 pan sshd[95417]: Disconnected from user root 46.4.50.47 port 46100 May 1 19:01:58 pan sshd[95414]: pam_unix(sshd:session): session closed for user root May 1 19:01:58 pan sshd[95794]: Accepted publickey for root from 46.4.50.47 port 46102 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:01:58 pan sshd[95794]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:01:58 pan sshd[95797]: Received disconnect from 46.4.50.47 port 46102:11: disconnected by user May 1 19:01:58 pan sshd[95797]: Disconnected from user root 46.4.50.47 port 46102 May 1 19:01:58 pan sshd[95794]: pam_unix(sshd:session): session closed for user root May 1 19:01:58 pan sshd[96174]: Accepted publickey for root from 46.4.50.47 port 46118 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:01:58 pan sshd[96174]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:01:59 pan sshd[96178]: Received disconnect from 46.4.50.47 port 46118:11: disconnected by user May 1 19:01:59 pan sshd[96178]: Disconnected from user root 46.4.50.47 port 46118 May 1 19:01:59 pan sshd[96174]: pam_unix(sshd:session): session closed for user root May 1 19:01:59 pan sshd[96555]: Accepted publickey for root from 46.4.50.47 port 46134 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:01:59 pan sshd[96555]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:02:01 pan systemd[96947]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:02:05 pan sshd[96558]: Received disconnect from 46.4.50.47 port 46134:11: disconnected by user May 1 19:02:05 pan sshd[96558]: Disconnected from user root 46.4.50.47 port 46134 May 1 19:02:05 pan sshd[96555]: pam_unix(sshd:session): session closed for user root May 1 19:02:05 pan sshd[96980]: Accepted publickey for root from 46.4.50.47 port 35924 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:02:05 pan sshd[96980]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:02:07 pan sshd[96983]: Received disconnect from 46.4.50.47 port 35924:11: disconnected by user May 1 19:02:07 pan sshd[96983]: Disconnected from user root 46.4.50.47 port 35924 May 1 19:02:07 pan sshd[96980]: pam_unix(sshd:session): session closed for user root May 1 19:02:07 pan sshd[97363]: Accepted publickey for root from 46.4.50.47 port 35936 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:02:07 pan sshd[97363]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:03:01 pan systemd[98046]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:03:09 pan useradd[98160]: failed adding user 'mailnull', exit code: 9 May 1 19:04:02 pan systemd[102551]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:05:00 pan sudo[103390]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 19:05:00 pan sudo[103390]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:05:00 pan sudo[103390]: pam_unix(sudo:session): session closed for user root May 1 19:05:00 pan sudo[103395]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 19:05:00 pan sudo[103395]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:05:00 pan sudo[103395]: pam_unix(sudo:session): session closed for user root May 1 19:05:00 pan sudo[103419]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 19:05:00 pan sudo[103419]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:05:00 pan sudo[103419]: pam_unix(sudo:session): session closed for user root May 1 19:05:00 pan unix_chkpwd[103485]: password check failed for user (root) May 1 19:05:00 pan sshd[103206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.143.4.81 user=root May 1 19:05:01 pan systemd[103550]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:05:01 pan systemd[103567]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:05:02 pan sshd[103206]: Failed password for root from 51.143.4.81 port 6016 ssh2 May 1 19:05:03 pan sshd[103206]: Connection closed by authenticating user root 51.143.4.81 port 6016 [preauth] May 1 19:06:01 pan systemd[104445]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:06:24 pan sudo[104532]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 19:06:24 pan sudo[104532]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:06:24 pan sudo[104532]: pam_unix(sudo:session): session closed for user root May 1 19:06:24 pan sudo[104537]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 19:06:24 pan sudo[104537]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:06:24 pan sudo[104537]: pam_unix(sudo:session): session closed for user root May 1 19:06:24 pan sudo[104542]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 19:06:24 pan sudo[104542]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:06:24 pan sudo[104542]: pam_unix(sudo:session): session closed for user root May 1 19:06:33 pan sshd[104558]: Invalid user user from 115.190.151.242 port 40182 May 1 19:06:33 pan sshd[104558]: pam_unix(sshd:auth): check pass; user unknown May 1 19:06:33 pan sshd[104558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.190.151.242 May 1 19:06:35 pan sshd[104558]: Failed password for invalid user user from 115.190.151.242 port 40182 ssh2 May 1 19:06:36 pan sshd[104558]: Received disconnect from 115.190.151.242 port 40182:11: Bye Bye [preauth] May 1 19:06:36 pan sshd[104558]: Disconnected from invalid user user 115.190.151.242 port 40182 [preauth] May 1 19:07:01 pan systemd[104618]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:08:01 pan systemd[104795]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:09:01 pan systemd[106677]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:09:14 pan sshd[104848]: Connection closed by 14.103.112.116 port 51390 [preauth] May 1 19:10:01 pan systemd[106858]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:10:01 pan systemd[106870]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:10:17 pan sshd[107614]: error: kex_exchange_identification: Connection closed by remote host May 1 19:10:38 pan unix_chkpwd[107691]: password check failed for user (root) May 1 19:10:38 pan sshd[107689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.109.200.50 user=root May 1 19:10:40 pan sshd[107689]: Failed password for root from 192.109.200.50 port 60972 ssh2 May 1 19:10:40 pan sshd[107689]: Connection closed by authenticating user root 192.109.200.50 port 60972 [preauth] May 1 19:11:01 pan systemd[107754]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:11:17 pan sudo[107852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 19:11:17 pan sudo[107852]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:11:17 pan sudo[107852]: pam_unix(sudo:session): session closed for user root May 1 19:11:17 pan sudo[107858]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 19:11:17 pan sudo[107858]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:11:17 pan sudo[107858]: pam_unix(sudo:session): session closed for user root May 1 19:11:17 pan sudo[107864]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 19:11:17 pan sudo[107864]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:11:17 pan sudo[107864]: pam_unix(sudo:session): session closed for user root May 1 19:11:59 pan sshd[107903]: Connection closed by 115.190.151.242 port 37066 [preauth] May 1 19:12:01 pan systemd[107928]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:12:52 pan sshd[108150]: Invalid user a from 192.109.200.50 port 30642 May 1 19:12:53 pan sshd[108150]: pam_unix(sshd:auth): check pass; user unknown May 1 19:12:53 pan sshd[108150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.109.200.50 May 1 19:12:53 pan sshd[108153]: Invalid user frappe from 192.109.200.50 port 30652 May 1 19:12:54 pan sshd[108153]: pam_unix(sshd:auth): check pass; user unknown May 1 19:12:54 pan sshd[108153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.109.200.50 May 1 19:12:54 pan sshd[108150]: Failed password for invalid user a from 192.109.200.50 port 30642 ssh2 May 1 19:12:55 pan sshd[108150]: Connection closed by invalid user a 192.109.200.50 port 30642 [preauth] May 1 19:12:56 pan sshd[108153]: Failed password for invalid user frappe from 192.109.200.50 port 30652 ssh2 May 1 19:13:01 pan systemd[108197]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:14:01 pan systemd[108452]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:15:01 pan systemd[108617]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:15:01 pan systemd[108633]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:16:00 pan sshd[109404]: Invalid user gialauyacht from 213.209.159.226 port 53964 May 1 19:16:00 pan sshd[109404]: pam_unix(sshd:auth): check pass; user unknown May 1 19:16:00 pan sshd[109404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.226 May 1 19:16:01 pan systemd[109418]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:16:02 pan sshd[109404]: Failed password for invalid user gialauyacht from 213.209.159.226 port 53964 ssh2 May 1 19:16:03 pan sshd[109404]: Connection closed by invalid user gialauyacht 213.209.159.226 port 53964 [preauth] May 1 19:16:46 pan sshd[97366]: Received disconnect from 46.4.50.47 port 35936:11: disconnected by user May 1 19:16:46 pan sshd[97366]: Disconnected from user root 46.4.50.47 port 35936 May 1 19:16:46 pan sshd[97363]: pam_unix(sshd:session): session closed for user root May 1 19:16:46 pan sshd[109473]: Accepted publickey for root from 46.4.50.47 port 46750 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:16:46 pan sshd[109473]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:17:01 pan systemd[109883]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:17:27 pan sshd[109477]: Received disconnect from 46.4.50.47 port 46750:11: disconnected by user May 1 19:17:27 pan sshd[109477]: Disconnected from user root 46.4.50.47 port 46750 May 1 19:17:27 pan sshd[109473]: pam_unix(sshd:session): session closed for user root May 1 19:17:27 pan sshd[109943]: Accepted publickey for root from 46.4.50.47 port 36136 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:17:27 pan sshd[109943]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:18:01 pan systemd[110359]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:19:01 pan systemd[110759]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:19:48 pan unix_chkpwd[110830]: password check failed for user (root) May 1 19:19:48 pan sshd[110827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.190.151.242 user=root May 1 19:19:50 pan sshd[110827]: Failed password for root from 115.190.151.242 port 33014 ssh2 May 1 19:19:51 pan sshd[110827]: Received disconnect from 115.190.151.242 port 33014:11: Bye Bye [preauth] May 1 19:19:51 pan sshd[110827]: Disconnected from authenticating user root 115.190.151.242 port 33014 [preauth] May 1 19:20:01 pan systemd[110916]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:20:01 pan systemd[110926]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:21:01 pan systemd[111698]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:21:38 pan sshd[111758]: Invalid user user1 from 115.190.151.242 port 42140 May 1 19:21:38 pan sshd[111758]: pam_unix(sshd:auth): check pass; user unknown May 1 19:21:38 pan sshd[111758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.190.151.242 May 1 19:21:40 pan sshd[111758]: Failed password for invalid user user1 from 115.190.151.242 port 42140 ssh2 May 1 19:22:01 pan systemd[111810]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:22:14 pan sshd[109946]: Received disconnect from 46.4.50.47 port 36136:11: disconnected by user May 1 19:22:14 pan sshd[109946]: Disconnected from user root 46.4.50.47 port 36136 May 1 19:22:14 pan sshd[109943]: pam_unix(sshd:session): session closed for user root May 1 19:22:14 pan sshd[111845]: Accepted publickey for root from 46.4.50.47 port 50306 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 19:22:14 pan sshd[111845]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 19:23:01 pan systemd[112270]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:24:01 pan systemd[112509]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:25:01 pan systemd[112666]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:25:01 pan systemd[112672]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:25:31 pan sshd[113403]: Invalid user gialauyacht from 213.209.159.227 port 40992 May 1 19:25:31 pan sshd[113403]: pam_unix(sshd:auth): check pass; user unknown May 1 19:25:31 pan sshd[113403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.227 May 1 19:25:33 pan sshd[113403]: Failed password for invalid user gialauyacht from 213.209.159.227 port 40992 ssh2 May 1 19:25:35 pan sshd[113403]: Connection closed by invalid user gialauyacht 213.209.159.227 port 40992 [preauth] May 1 19:26:01 pan systemd[113432]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:27:01 pan systemd[113516]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:28:01 pan systemd[113650]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:29:01 pan systemd[113908]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:30:01 pan systemd[114101]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:30:01 pan systemd[114120]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:30:59 pan sshd[114889]: error: kex_exchange_identification: read: Connection reset by peer May 1 19:31:01 pan systemd[114901]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:32:01 pan systemd[114993]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:33:01 pan systemd[115082]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:34:01 pan systemd[115482]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:35:01 pan systemd[115644]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:35:01 pan systemd[115658]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:36:01 pan systemd[116429]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:37:01 pan systemd[116516]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:38:01 pan systemd[116602]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:39:01 pan systemd[116844]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:40:01 pan systemd[117028]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:40:01 pan systemd[117034]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:41:01 pan systemd[117819]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:42:01 pan systemd[117965]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:43:01 pan systemd[118058]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:44:01 pan systemd[118222]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:45:01 pan systemd[118495]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:45:01 pan systemd[118506]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:46:01 pan systemd[119276]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:47:01 pan systemd[119354]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:47:23 pan sudo[119408]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 19:47:23 pan sudo[119408]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:23 pan sudo[119408]: pam_unix(sudo:session): session closed for user root May 1 19:47:23 pan sudo[119412]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 19:47:23 pan sudo[119412]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:23 pan sudo[119412]: pam_unix(sudo:session): session closed for user root May 1 19:47:23 pan sudo[119416]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 19:47:23 pan sudo[119416]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:23 pan sudo[119416]: pam_unix(sudo:session): session closed for user root May 1 19:47:23 pan sudo[119420]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 19:47:23 pan sudo[119420]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:23 pan sudo[119420]: pam_unix(sudo:session): session closed for user root May 1 19:47:23 pan sudo[119424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 19:47:23 pan sudo[119424]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:23 pan sudo[119424]: pam_unix(sudo:session): session closed for user root May 1 19:47:23 pan sudo[119428]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 19:47:23 pan sudo[119428]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:23 pan sudo[119428]: pam_unix(sudo:session): session closed for user root May 1 19:47:24 pan sudo[119434]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 19:47:24 pan sudo[119434]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:24 pan sudo[119434]: pam_unix(sudo:session): session closed for user root May 1 19:47:24 pan sudo[119439]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 19:47:24 pan sudo[119439]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:24 pan sudo[119439]: pam_unix(sudo:session): session closed for user root May 1 19:47:24 pan sudo[119445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 19:47:24 pan sudo[119445]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:24 pan sudo[119445]: pam_unix(sudo:session): session closed for user root May 1 19:47:24 pan sudo[119450]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 19:47:24 pan sudo[119450]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:24 pan sudo[119450]: pam_unix(sudo:session): session closed for user root May 1 19:47:24 pan sudo[119454]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JGGv2He93QcLvpdo.~ May 1 19:47:24 pan sudo[119454]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:24 pan sudo[119454]: pam_unix(sudo:session): session closed for user root May 1 19:47:24 pan sudo[119458]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JGGv2He93QcLvpdo.~\'' May 1 19:47:24 pan sudo[119458]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:24 pan sudo[119458]: pam_unix(sudo:session): session closed for user root May 1 19:47:24 pan sudo[119463]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JGGv2He93QcLvpdo.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 19:47:24 pan sudo[119463]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:24 pan sudo[119463]: pam_unix(sudo:session): session closed for user root May 1 19:47:24 pan sudo[119468]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 19:47:24 pan sudo[119468]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:24 pan sudo[119468]: pam_unix(sudo:session): session closed for user root May 1 19:47:24 pan sudo[119475]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 19:47:25 pan sudo[119475]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:25 pan sudo[119475]: pam_unix(sudo:session): session closed for user root May 1 19:47:25 pan sudo[119480]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 19:47:25 pan sudo[119480]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:25 pan sudo[119480]: pam_unix(sudo:session): session closed for user root May 1 19:47:25 pan sudo[119693]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 19:47:25 pan sudo[119693]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 19:47:25 pan sudo[119693]: pam_unix(sudo:session): session closed for user root May 1 19:48:01 pan systemd[119734]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:49:01 pan systemd[120007]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:50:01 pan systemd[120303]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:50:01 pan systemd[120320]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:50:36 pan unix_chkpwd[121059]: password check failed for user (root) May 1 19:50:36 pan sshd[121057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.228 user=root May 1 19:50:38 pan sshd[121057]: Failed password for root from 213.209.159.228 port 43178 ssh2 May 1 19:50:39 pan sshd[121057]: Connection closed by authenticating user root 213.209.159.228 port 43178 [preauth] May 1 19:51:01 pan systemd[121089]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:52:01 pan systemd[121210]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:52:08 pan sshd[121240]: error: type 20 seq 2 [preauth] May 1 19:52:08 pan sshd[121240]: error: type 30 seq 3 [preauth] May 1 19:52:09 pan sshd[121240]: error: type 20 seq 4 [preauth] May 1 19:52:09 pan sshd[121240]: error: type 30 seq 5 [preauth] May 1 19:52:11 pan sshd[121240]: error: type 20 seq 6 [preauth] May 1 19:52:11 pan sshd[121240]: error: type 30 seq 7 [preauth] May 1 19:52:39 pan sshd[121240]: Connection reset by 89.187.80.32 port 6102 [preauth] May 1 19:53:01 pan systemd[121308]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:54:01 pan systemd[121462]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:55:02 pan systemd[121770]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 19:55:02 pan systemd[121784]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:56:01 pan systemd[122583]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:57:01 pan systemd[122685]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:58:01 pan systemd[122786]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 19:59:01 pan systemd[122915]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:00:01 pan systemd[123222]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:00:01 pan systemd[123238]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:00:53 pan sshd[80388]: Received disconnect from 46.4.50.47 port 55952:11: disconnected by user May 1 20:00:53 pan sshd[80388]: Disconnected from user root 46.4.50.47 port 55952 May 1 20:00:53 pan sshd[80385]: pam_unix(sshd:session): session closed for user root May 1 20:01:01 pan systemd[124055]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:02:01 pan systemd[124152]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:03:01 pan systemd[124514]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:04:01 pan systemd[124835]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:05:01 pan systemd[125130]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:05:01 pan systemd[125141]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:06:01 pan systemd[125956]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:07:01 pan systemd[126067]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:07:02 pan sshd[111848]: Received disconnect from 46.4.50.47 port 50306:11: disconnected by user May 1 20:07:02 pan sshd[111848]: Disconnected from user root 46.4.50.47 port 50306 May 1 20:07:02 pan sshd[111845]: pam_unix(sshd:session): session closed for user root May 1 20:07:02 pan sshd[126088]: Accepted publickey for root from 46.4.50.47 port 53818 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 20:07:02 pan sshd[126088]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 20:07:03 pan sshd[126091]: Received disconnect from 46.4.50.47 port 53818:11: disconnected by user May 1 20:07:03 pan sshd[126091]: Disconnected from user root 46.4.50.47 port 53818 May 1 20:07:03 pan sshd[126088]: pam_unix(sshd:session): session closed for user root May 1 20:07:03 pan sshd[126473]: Accepted publickey for root from 46.4.50.47 port 50032 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 20:07:03 pan sshd[126473]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 20:07:17 pan sshd[126476]: Received disconnect from 46.4.50.47 port 50032:11: disconnected by user May 1 20:07:17 pan sshd[126476]: Disconnected from user root 46.4.50.47 port 50032 May 1 20:07:17 pan sshd[126473]: pam_unix(sshd:session): session closed for user root May 1 20:08:01 pan systemd[126948]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:09:01 pan systemd[127126]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:09:01 pan systemd[127130]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:10:01 pan systemd[127433]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:10:01 pan systemd[127434]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:10:01 pan systemd[127451]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:10:15 pan systemd[127438]: pam_unix(systemd-user:session): session closed for user root May 1 20:11:01 pan systemd[128251]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:12:01 pan systemd[128359]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:13:01 pan systemd[128453]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:14:01 pan systemd[128545]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:14:01 pan systemd[128550]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:15:01 pan systemd[128867]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:15:01 pan systemd[128872]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:15:01 pan systemd[128888]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:16:01 pan systemd[129682]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:17:01 pan systemd[129794]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:18:01 pan systemd[129895]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:19:01 pan systemd[130173]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:20:01 pan systemd[130474]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:20:01 pan systemd[130488]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:20:01 pan systemd[130494]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:21:01 pan systemd[131293]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:22:01 pan systemd[131380]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:23:01 pan systemd[131466]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:24:01 pan systemd[131557]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:25:01 pan systemd[131833]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:25:01 pan systemd[131844]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:25:01 pan systemd[131860]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:26:01 pan systemd[132648]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:27:01 pan systemd[132754]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:28:01 pan systemd[132859]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:29:01 pan systemd[132953]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:29:01 pan systemd[132957]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:30:02 pan systemd[133267]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:30:02 pan systemd[133278]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:30:02 pan systemd[133288]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:31:01 pan systemd[134103]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:32:01 pan systemd[134194]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:33:01 pan systemd[134292]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:34:01 pan systemd[134576]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:35:01 pan systemd[134864]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:35:01 pan systemd[134878]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:35:01 pan systemd[134885]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:36:01 pan systemd[135693]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:37:01 pan systemd[135788]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:38:01 pan systemd[135882]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:39:01 pan systemd[135985]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:39:01 pan systemd[135989]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:40:01 pan systemd[136288]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:40:01 pan systemd[136301]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:40:01 pan systemd[136315]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:41:01 pan systemd[137139]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:42:01 pan systemd[137227]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:43:01 pan systemd[137313]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:44:01 pan systemd[137422]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:44:01 pan systemd[137427]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:45:01 pan systemd[137799]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:45:01 pan systemd[137813]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:45:01 pan systemd[137823]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:46:01 pan systemd[138623]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:47:01 pan systemd[138752]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:47:23 pan sudo[138812]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa May 1 20:47:23 pan systemd[138816]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:47:23 pan sudo[138812]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:23 pan sudo[138812]: pam_unix(sudo:session): session closed for user root May 1 20:47:23 pan sudo[138828]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa May 1 20:47:23 pan sudo[138828]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:23 pan sudo[138828]: pam_unix(sudo:session): session closed for user root May 1 20:47:23 pan sudo[138833]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa May 1 20:47:23 pan sudo[138833]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:23 pan sudo[138833]: pam_unix(sudo:session): session closed for user root May 1 20:47:23 pan sudo[138837]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel May 1 20:47:23 pan sudo[138837]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:23 pan sudo[138837]: pam_unix(sudo:session): session closed for user root May 1 20:47:23 pan sudo[138841]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version May 1 20:47:23 pan sudo[138841]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:23 pan sudo[138841]: pam_unix(sudo:session): session closed for user root May 1 20:47:23 pan sudo[138846]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'readlink /usr/local/cpanel/server.type' May 1 20:47:23 pan sudo[138846]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:23 pan sudo[138846]: pam_unix(sudo:session): session closed for user root May 1 20:47:23 pan sudo[138852]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 20:47:23 pan sudo[138852]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:23 pan sudo[138852]: pam_unix(sudo:session): session closed for user root May 1 20:47:23 pan sudo[138857]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 20:47:23 pan sudo[138857]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138857]: pam_unix(sudo:session): session closed for user root May 1 20:47:24 pan sudo[138862]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 20:47:24 pan sudo[138862]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138862]: pam_unix(sudo:session): session closed for user root May 1 20:47:24 pan sudo[138867]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 20:47:24 pan sudo[138867]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138867]: pam_unix(sudo:session): session closed for user root May 1 20:47:24 pan sudo[138871]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5F9kuRFyAhwXAm3l.~ May 1 20:47:24 pan sudo[138871]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138871]: pam_unix(sudo:session): session closed for user root May 1 20:47:24 pan sudo[138875]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'cat > \'/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5F9kuRFyAhwXAm3l.~\'' May 1 20:47:24 pan sudo[138875]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138875]: pam_unix(sudo:session): session closed for user root May 1 20:47:24 pan sudo[138880]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5F9kuRFyAhwXAm3l.~ /etc/logrotate.d/wp-toolkit-action-logs.~ May 1 20:47:24 pan sudo[138880]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138880]: pam_unix(sudo:session): session closed for user root May 1 20:47:24 pan sudo[138884]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'mv \'/etc/logrotate.d/wp-toolkit-action-logs.~\' /etc/logrotate.d/wp-toolkit-action-logs' May 1 20:47:24 pan sudo[138884]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138884]: pam_unix(sudo:session): session closed for user root May 1 20:47:24 pan sudo[138890]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_shared_ip --output=json' May 1 20:47:24 pan sudo[138890]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138890]: pam_unix(sudo:session): session closed for user root May 1 20:47:24 pan sudo[138895]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_public_ip ip=46.4.168.178 --output=json' May 1 20:47:24 pan sudo[138895]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138895]: pam_unix(sudo:session): session closed for user root May 1 20:47:24 pan sudo[138994]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_tweaksetting key=server_locale --output=json' May 1 20:47:24 pan sudo[138994]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:47:24 pan sudo[138994]: pam_unix(sudo:session): session closed for user root May 1 20:48:01 pan systemd[139222]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:49:01 pan systemd[139489]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:50:01 pan systemd[139773]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:50:01 pan systemd[139783]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:50:01 pan systemd[139797]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:51:01 pan systemd[140590]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:52:01 pan systemd[140682]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:52:06 pan sshd[140706]: error: kex_exchange_identification: Connection closed by remote host May 1 20:52:31 pan sshd[140733]: Invalid user gialauyacht from 213.209.159.228 port 34300 May 1 20:52:31 pan sshd[140733]: pam_unix(sshd:auth): check pass; user unknown May 1 20:52:31 pan sshd[140733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.228 May 1 20:52:32 pan sshd[140733]: Failed password for invalid user gialauyacht from 213.209.159.228 port 34300 ssh2 May 1 20:52:32 pan sshd[140733]: Connection closed by invalid user gialauyacht 213.209.159.228 port 34300 [preauth] May 1 20:53:01 pan systemd[140775]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:54:01 pan systemd[140874]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:55:01 pan systemd[141029]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:55:01 pan systemd[141039]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:55:01 pan systemd[141049]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 20:56:01 pan systemd[142140]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:57:01 pan systemd[142214]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:58:01 pan systemd[142303]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:59:01 pan systemd[142427]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 20:59:01 pan systemd[142432]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 20:59:05 pan sudo[142507]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json' May 1 20:59:05 pan sudo[142507]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:59:05 pan sudo[142507]: pam_unix(sudo:session): session closed for user root May 1 20:59:05 pan sudo[142513]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json' May 1 20:59:05 pan sudo[142513]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:59:05 pan sudo[142513]: pam_unix(sudo:session): session closed for user root May 1 20:59:05 pan sudo[142540]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_users_features_settings user-1=bangherangstudio feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe --output=json' May 1 20:59:05 pan sudo[142540]: pam_unix(sudo:session): session opened for user root by (uid=979) May 1 20:59:06 pan sudo[142540]: pam_unix(sudo:session): session closed for user root May 1 21:00:01 pan systemd[143737]: pam_unix(systemd-user:session): session opened for user munin by (uid=0) May 1 21:00:01 pan systemd[143738]: pam_unix(systemd-user:session): session opened for user root by (uid=0) May 1 21:00:01 pan systemd[143751]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 21:00:01 pan sshd[143787]: Accepted publickey for root from 46.4.50.47 port 43976 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:01 pan sshd[143787]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:01 pan sshd[143794]: Received disconnect from 46.4.50.47 port 43976:11: disconnected by user May 1 21:00:01 pan sshd[143794]: Disconnected from user root 46.4.50.47 port 43976 May 1 21:00:01 pan sshd[143787]: pam_unix(sshd:session): session closed for user root May 1 21:00:01 pan sshd[144245]: Accepted publickey for root from 46.4.50.47 port 43978 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:01 pan sshd[144245]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:02 pan sshd[144250]: Received disconnect from 46.4.50.47 port 43978:11: disconnected by user May 1 21:00:02 pan sshd[144250]: Disconnected from user root 46.4.50.47 port 43978 May 1 21:00:02 pan sshd[144245]: pam_unix(sshd:session): session closed for user root May 1 21:00:02 pan sshd[144646]: Accepted publickey for root from 46.4.50.47 port 43992 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:02 pan sshd[144646]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:02 pan sshd[144649]: Received disconnect from 46.4.50.47 port 43992:11: disconnected by user May 1 21:00:02 pan sshd[144649]: Disconnected from user root 46.4.50.47 port 43992 May 1 21:00:02 pan sshd[144646]: pam_unix(sshd:session): session closed for user root May 1 21:00:02 pan sshd[145035]: Accepted publickey for root from 46.4.50.47 port 44000 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:02 pan sshd[145035]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:03 pan sshd[145064]: Received disconnect from 46.4.50.47 port 44000:11: disconnected by user May 1 21:00:03 pan sshd[145064]: Disconnected from user root 46.4.50.47 port 44000 May 1 21:00:03 pan sshd[145035]: pam_unix(sshd:session): session closed for user root May 1 21:00:03 pan sshd[145498]: Accepted publickey for root from 46.4.50.47 port 44012 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:03 pan sshd[145498]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:03 pan sshd[145503]: Received disconnect from 46.4.50.47 port 44012:11: disconnected by user May 1 21:00:03 pan sshd[145503]: Disconnected from user root 46.4.50.47 port 44012 May 1 21:00:03 pan sshd[145498]: pam_unix(sshd:session): session closed for user root May 1 21:00:03 pan sshd[145910]: Accepted publickey for root from 46.4.50.47 port 44026 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:03 pan sshd[145910]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:03 pan sshd[145917]: Received disconnect from 46.4.50.47 port 44026:11: disconnected by user May 1 21:00:03 pan sshd[145917]: Disconnected from user root 46.4.50.47 port 44026 May 1 21:00:03 pan sshd[145910]: pam_unix(sshd:session): session closed for user root May 1 21:00:03 pan sshd[146303]: Accepted publickey for root from 46.4.50.47 port 40104 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:03 pan sshd[146303]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:04 pan sshd[146319]: Received disconnect from 46.4.50.47 port 40104:11: disconnected by user May 1 21:00:04 pan sshd[146319]: Disconnected from user root 46.4.50.47 port 40104 May 1 21:00:04 pan sshd[146303]: pam_unix(sshd:session): session closed for user root May 1 21:00:04 pan sshd[146718]: Accepted publickey for root from 46.4.50.47 port 40112 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:04 pan sshd[146718]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:04 pan sshd[146722]: Received disconnect from 46.4.50.47 port 40112:11: disconnected by user May 1 21:00:04 pan sshd[146722]: Disconnected from user root 46.4.50.47 port 40112 May 1 21:00:04 pan sshd[146718]: pam_unix(sshd:session): session closed for user root May 1 21:00:04 pan sshd[147100]: Accepted publickey for root from 46.4.50.47 port 40126 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:04 pan sshd[147100]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:05 pan sshd[147105]: Received disconnect from 46.4.50.47 port 40126:11: disconnected by user May 1 21:00:05 pan sshd[147105]: Disconnected from user root 46.4.50.47 port 40126 May 1 21:00:05 pan sshd[147100]: pam_unix(sshd:session): session closed for user root May 1 21:00:05 pan sshd[147482]: Accepted publickey for root from 46.4.50.47 port 40132 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:05 pan sshd[147482]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:05 pan sshd[147485]: Received disconnect from 46.4.50.47 port 40132:11: disconnected by user May 1 21:00:05 pan sshd[147485]: Disconnected from user root 46.4.50.47 port 40132 May 1 21:00:05 pan sshd[147482]: pam_unix(sshd:session): session closed for user root May 1 21:00:05 pan sshd[147893]: Accepted publickey for root from 46.4.50.47 port 40146 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:05 pan sshd[147893]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:06 pan sshd[148080]: Received disconnect from 46.4.50.47 port 40146:11: disconnected by user May 1 21:00:06 pan sshd[148080]: Disconnected from user root 46.4.50.47 port 40146 May 1 21:00:06 pan sshd[147893]: pam_unix(sshd:session): session closed for user root May 1 21:00:06 pan sshd[148541]: Accepted publickey for root from 46.4.50.47 port 40150 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:06 pan sshd[148541]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:07 pan sshd[148545]: Received disconnect from 46.4.50.47 port 40150:11: disconnected by user May 1 21:00:07 pan sshd[148545]: Disconnected from user root 46.4.50.47 port 40150 May 1 21:00:07 pan sshd[148541]: pam_unix(sshd:session): session closed for user root May 1 21:00:07 pan sshd[148972]: Accepted publickey for root from 46.4.50.47 port 40152 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:07 pan sshd[148972]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:07 pan sshd[148983]: Received disconnect from 46.4.50.47 port 40152:11: disconnected by user May 1 21:00:07 pan sshd[148983]: Disconnected from user root 46.4.50.47 port 40152 May 1 21:00:07 pan sshd[148972]: pam_unix(sshd:session): session closed for user root May 1 21:00:07 pan sshd[149376]: Accepted publickey for root from 46.4.50.47 port 40156 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:07 pan sshd[149376]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:08 pan sshd[149387]: Received disconnect from 46.4.50.47 port 40156:11: disconnected by user May 1 21:00:08 pan sshd[149387]: Disconnected from user root 46.4.50.47 port 40156 May 1 21:00:08 pan sshd[149376]: pam_unix(sshd:session): session closed for user root May 1 21:00:08 pan sshd[149773]: Accepted publickey for root from 46.4.50.47 port 40168 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:08 pan sshd[149773]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:08 pan sshd[149777]: Received disconnect from 46.4.50.47 port 40168:11: disconnected by user May 1 21:00:08 pan sshd[149777]: Disconnected from user root 46.4.50.47 port 40168 May 1 21:00:08 pan sshd[149773]: pam_unix(sshd:session): session closed for user root May 1 21:00:08 pan sshd[150158]: Accepted publickey for root from 46.4.50.47 port 40182 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:08 pan sshd[150158]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:09 pan sshd[150163]: Received disconnect from 46.4.50.47 port 40182:11: disconnected by user May 1 21:00:09 pan sshd[150163]: Disconnected from user root 46.4.50.47 port 40182 May 1 21:00:09 pan sshd[150158]: pam_unix(sshd:session): session closed for user root May 1 21:00:09 pan sshd[150583]: Accepted publickey for root from 46.4.50.47 port 40190 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:09 pan sshd[150583]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:09 pan sshd[150595]: Received disconnect from 46.4.50.47 port 40190:11: disconnected by user May 1 21:00:09 pan sshd[150595]: Disconnected from user root 46.4.50.47 port 40190 May 1 21:00:09 pan sshd[150583]: pam_unix(sshd:session): session closed for user root May 1 21:00:09 pan sshd[151022]: Accepted publickey for root from 46.4.50.47 port 40204 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:09 pan sshd[151022]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:10 pan sshd[151039]: Received disconnect from 46.4.50.47 port 40204:11: disconnected by user May 1 21:00:10 pan sshd[151039]: Disconnected from user root 46.4.50.47 port 40204 May 1 21:00:10 pan sshd[151022]: pam_unix(sshd:session): session closed for user root May 1 21:00:10 pan sshd[151431]: Accepted publickey for root from 46.4.50.47 port 40208 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:10 pan sshd[151431]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:10 pan sshd[151435]: Received disconnect from 46.4.50.47 port 40208:11: disconnected by user May 1 21:00:10 pan sshd[151435]: Disconnected from user root 46.4.50.47 port 40208 May 1 21:00:10 pan sshd[151431]: pam_unix(sshd:session): session closed for user root May 1 21:00:10 pan sshd[151812]: Accepted publickey for root from 46.4.50.47 port 40224 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:10 pan sshd[151812]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:10 pan sshd[151815]: Received disconnect from 46.4.50.47 port 40224:11: disconnected by user May 1 21:00:10 pan sshd[151815]: Disconnected from user root 46.4.50.47 port 40224 May 1 21:00:10 pan sshd[151812]: pam_unix(sshd:session): session closed for user root May 1 21:00:10 pan sshd[152192]: Accepted publickey for root from 46.4.50.47 port 40236 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:10 pan sshd[152192]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:11 pan sshd[152195]: Received disconnect from 46.4.50.47 port 40236:11: disconnected by user May 1 21:00:11 pan sshd[152195]: Disconnected from user root 46.4.50.47 port 40236 May 1 21:00:11 pan sshd[152192]: pam_unix(sshd:session): session closed for user root May 1 21:00:11 pan sshd[152572]: Accepted publickey for root from 46.4.50.47 port 40242 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:11 pan sshd[152572]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:11 pan sshd[152575]: Received disconnect from 46.4.50.47 port 40242:11: disconnected by user May 1 21:00:11 pan sshd[152575]: Disconnected from user root 46.4.50.47 port 40242 May 1 21:00:11 pan sshd[152572]: pam_unix(sshd:session): session closed for user root May 1 21:00:11 pan sshd[152961]: Accepted publickey for root from 46.4.50.47 port 40256 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:11 pan sshd[152961]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:12 pan sshd[152964]: Received disconnect from 46.4.50.47 port 40256:11: disconnected by user May 1 21:00:12 pan sshd[152964]: Disconnected from user root 46.4.50.47 port 40256 May 1 21:00:12 pan sshd[152961]: pam_unix(sshd:session): session closed for user root May 1 21:00:12 pan sshd[153342]: Accepted publickey for root from 46.4.50.47 port 40272 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:12 pan sshd[153342]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:12 pan sshd[153345]: Received disconnect from 46.4.50.47 port 40272:11: disconnected by user May 1 21:00:12 pan sshd[153345]: Disconnected from user root 46.4.50.47 port 40272 May 1 21:00:12 pan sshd[153342]: pam_unix(sshd:session): session closed for user root May 1 21:00:12 pan sshd[153723]: Accepted publickey for root from 46.4.50.47 port 40282 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:12 pan sshd[153723]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:13 pan sshd[153726]: Received disconnect from 46.4.50.47 port 40282:11: disconnected by user May 1 21:00:13 pan sshd[153726]: Disconnected from user root 46.4.50.47 port 40282 May 1 21:00:13 pan sshd[153723]: pam_unix(sshd:session): session closed for user root May 1 21:00:13 pan sshd[154103]: Accepted publickey for root from 46.4.50.47 port 40290 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:13 pan sshd[154103]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:13 pan sshd[154106]: Received disconnect from 46.4.50.47 port 40290:11: disconnected by user May 1 21:00:13 pan sshd[154106]: Disconnected from user root 46.4.50.47 port 40290 May 1 21:00:13 pan sshd[154103]: pam_unix(sshd:session): session closed for user root May 1 21:00:13 pan sshd[154483]: Accepted publickey for root from 46.4.50.47 port 40296 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:13 pan sshd[154483]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:13 pan sshd[154488]: Received disconnect from 46.4.50.47 port 40296:11: disconnected by user May 1 21:00:13 pan sshd[154488]: Disconnected from user root 46.4.50.47 port 40296 May 1 21:00:13 pan sshd[154483]: pam_unix(sshd:session): session closed for user root May 1 21:00:14 pan sshd[154866]: Accepted publickey for root from 46.4.50.47 port 38428 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:14 pan sshd[154866]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:14 pan sshd[154869]: Received disconnect from 46.4.50.47 port 38428:11: disconnected by user May 1 21:00:14 pan sshd[154869]: Disconnected from user root 46.4.50.47 port 38428 May 1 21:00:14 pan sshd[154866]: pam_unix(sshd:session): session closed for user root May 1 21:00:14 pan sshd[155246]: Accepted publickey for root from 46.4.50.47 port 38444 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:14 pan sshd[155246]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:14 pan sshd[155250]: Received disconnect from 46.4.50.47 port 38444:11: disconnected by user May 1 21:00:14 pan sshd[155250]: Disconnected from user root 46.4.50.47 port 38444 May 1 21:00:14 pan sshd[155246]: pam_unix(sshd:session): session closed for user root May 1 21:00:14 pan sshd[155627]: Accepted publickey for root from 46.4.50.47 port 38452 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:14 pan sshd[155627]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:15 pan sshd[155630]: Received disconnect from 46.4.50.47 port 38452:11: disconnected by user May 1 21:00:15 pan sshd[155630]: Disconnected from user root 46.4.50.47 port 38452 May 1 21:00:15 pan sshd[155627]: pam_unix(sshd:session): session closed for user root May 1 21:00:15 pan sshd[156007]: Accepted publickey for root from 46.4.50.47 port 38466 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:15 pan sshd[156007]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:16 pan sshd[156010]: Received disconnect from 46.4.50.47 port 38466:11: disconnected by user May 1 21:00:16 pan sshd[156010]: Disconnected from user root 46.4.50.47 port 38466 May 1 21:00:16 pan sshd[156007]: pam_unix(sshd:session): session closed for user root May 1 21:00:16 pan sshd[156387]: Accepted publickey for root from 46.4.50.47 port 38474 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:16 pan sshd[156387]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:16 pan sshd[156390]: Received disconnect from 46.4.50.47 port 38474:11: disconnected by user May 1 21:00:16 pan sshd[156390]: Disconnected from user root 46.4.50.47 port 38474 May 1 21:00:16 pan sshd[156387]: pam_unix(sshd:session): session closed for user root May 1 21:00:16 pan sshd[156767]: Accepted publickey for root from 46.4.50.47 port 38480 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:16 pan sshd[156767]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:17 pan sshd[156770]: Received disconnect from 46.4.50.47 port 38480:11: disconnected by user May 1 21:00:17 pan sshd[156770]: Disconnected from user root 46.4.50.47 port 38480 May 1 21:00:17 pan sshd[156767]: pam_unix(sshd:session): session closed for user root May 1 21:00:17 pan sshd[157149]: Accepted publickey for root from 46.4.50.47 port 38486 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:17 pan sshd[157149]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:18 pan sshd[157154]: Received disconnect from 46.4.50.47 port 38486:11: disconnected by user May 1 21:00:18 pan sshd[157154]: Disconnected from user root 46.4.50.47 port 38486 May 1 21:00:18 pan sshd[157149]: pam_unix(sshd:session): session closed for user root May 1 21:00:19 pan sshd[157535]: Accepted publickey for root from 46.4.50.47 port 38496 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:19 pan sshd[157535]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:19 pan sshd[157538]: Received disconnect from 46.4.50.47 port 38496:11: disconnected by user May 1 21:00:19 pan sshd[157538]: Disconnected from user root 46.4.50.47 port 38496 May 1 21:00:19 pan sshd[157535]: pam_unix(sshd:session): session closed for user root May 1 21:00:19 pan sshd[157916]: Accepted publickey for root from 46.4.50.47 port 38500 ssh2: RSA SHA256:qS4UKJizrv7NxCz8GxVhIHnvCVaPlkvNTpKN626tC2A May 1 21:00:19 pan sshd[157916]: pam_unix(sshd:session): session opened for user root by (uid=0) May 1 21:00:19 pan sshd[157919]: Received disconnect from 46.4.50.47 port 38500:11: disconnected by user May 1 21:00:19 pan sshd[157919]: Disconnected from user root 46.4.50.47 port 38500 May 1 21:00:19 pan sshd[157916]: pam_unix(sshd:session): session closed for user root May 1 21:00:57 pan unix_chkpwd[158365]: password check failed for user (root) May 1 21:00:57 pan sshd[158363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.236 user=root May 1 21:00:59 pan sshd[158363]: Failed password for root from 213.209.159.236 port 34226 ssh2 May 1 21:00:59 pan sshd[158363]: Connection closed by authenticating user root 213.209.159.236 port 34226 [preauth] May 1 21:01:01 pan systemd[158390]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 21:02:01 pan systemd[158486]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) May 1 21:03:01 pan systemd[158573]: pam_unix(systemd-user:session): session opened for user bangherangstudio by (uid=0) === 18. FILE .htaccess MODIFICATI RECENTEMENTE === /home/bangherangstudio/analytics.deriplast.group/.htaccess /home/bangherangstudio/tregolfisailingweek.com/.htaccess /home/bangherangstudio/v2.paladeri.it/.htaccess /home/bangherangstudio/rei-casoria.it/.htaccess /home/bangherangstudio/statistiche.trattoriadelgolfo.net/.htaccess /home/bangherangstudio/mkt.trattoriadelgolfo.net/.htaccess /home/bangherangstudio/casettamirene.it/.htaccess /home/bangherangstudio/metodorisani.it/.htaccess /home/bangherangstudio/sherlock.bangherangstudio.it/.htaccess /home/bangherangstudio/circolonazionaledellunione.com/.htaccess /home/bangherangstudio/ristrutturazionibagni.impiantipinna.it/.htaccess /home/bangherangstudio/deriplast.group/.htaccess /home/bangherangstudio/fc.fruititaly.it/.htaccess /home/bangherangstudio/buonotravel/v2/public/.htaccess /home/bangherangstudio/buonotravel/docs/public/.htaccess /home/bangherangstudio/racedigitalplatform.it/.htaccess /home/bangherangstudio/crvitalia.it/.htaccess /home/bangherangstudio/go.bngh.it/.htaccess /home/bangherangstudio/immobilicp-arzano.it/.htaccess /home/bangherangstudio/osservatoriosonda.it/.htaccess /home/bangherangstudio/progetti.bangherangstudio.it/.htaccess /home/bangherangstudio/measurements.2025finneuropeans.org/.htaccess /home/bangherangstudio/bmbeu.com/.htaccess /home/bangherangstudio/arcodellerose.it/.htaccess /home/bangherangstudio/finimm-marcianise.it/.htaccess /home/bangherangstudio/paladeri.eu/.htaccess /home/bangherangstudio/public_html/.htaccess /home/bangherangstudio/ccs.bangherangstudio.it/public/.htaccess /home/bangherangstudio/newsletter.paladeri.it/.htaccess /home/bangherangstudio/impiantipinna.it/.htaccess /home/bangherangstudio/paladeri/contacts/public/.htaccess /home/bangherangstudio/paladeri/docs/v1/public/.htaccess /home/bangherangstudio/paladeri/salesforce/public/.htaccess /home/bangherangstudio/bngh.it/.htaccess /home/bangherangstudio/restaurimobiliecornici.com/.htaccess /home/bangherangstudio/grandeacquedottoadriatico.wpeitalia.eu/.htaccess /home/bangherangstudio/qs.bngh.it/.htaccess /home/bangherangstudio/emanuelegnemmi.it/.htaccess /home/bangherangstudio/castproof.it/.htaccess /home/bangherangstudio/thegreatgiginthewine.it/.htaccess /home/bangherangstudio/ariaaps.it/.htaccess /home/bangherangstudio/camiceriarepubblicamarinara.it/.htaccess /home/bangherangstudio/ilgiardinodisilvia.villasilvia.it/.htaccess /home/bangherangstudio/volkancrosstrain.it/.htaccess /home/bangherangstudio/narbit.it/.htaccess /home/bangherangstudio/v2.gieffevending.it/.htaccess /home/bangherangstudio/tool.fruititaly.it/.htaccess /home/bangherangstudio/telemat.paladeri.it/.htaccess /home/bangherangstudio/vitosimeolisaloon.it/.htaccess /home/bangherangstudio/procidavelacup.com/.htaccess /home/bangherangstudio/chiaiacommunitystreet.bngh.it/v2/.htaccess /home/bangherangstudio/pensaunpo.it/.htaccess /home/bangherangstudio/pensaunpo.it/wp-content/uploads/wpforms/cache/.htaccess /home/bangherangstudio/rubricadlg.bngh.it/.htaccess /home/bangherangstudio/marcianisepremiumlands.it/.htaccess /home/bangherangstudio/ebook.gialauyacht.com/.htaccess /home/bangherangstudio/holdingcirinopomicino.it/.htaccess /home/bangherangstudio/bibliotecaprofavvbocchini.it/.htaccess /home/bangherangstudio/2025finneuropeans.org/.htaccess /home/bangherangstudio/giochi.bngh.it/.htaccess /home/bangherangstudio/scuola.villasilvia.it/.htaccess /home/bangherangstudio/analysis.paladeri.it/.htaccess /home/bangherangstudio/bmb-aqua.com/.htaccess /home/bangherangstudio/paladeri.it/wp-content/wflogs/.htaccess /home/bangherangstudio/lunabuciarda.it/.htaccess /home/bangherangstudio/chiaiacommunitystreet/.htaccess /home/bangherangstudio/pizzeriamaione.it/.htaccess /home/bangherangstudio/press.gialauyacht.com/.htaccess /home/bangherangstudio/wpeitalia.eu/.htaccess /home/bangherangstudio/americascup-napoli.com/.htaccess /home/bangherangstudio/lcp.bngh.it/.htaccess /home/bangherangstudio/gruppocirinopomicino.com/.htaccess /home/bangherangstudio/ariaonlus.it/.htaccess /home/bangherangstudio/buonotravel.eu/.htaccess /home/bangherangstudio/covielloshowroom.it/.htaccess /home/bangherangstudio/gruppoindustrialecirinopomicino.com/.htaccess /home/bangherangstudio/smartmap-chiaia.bngh.it/frontend/.htaccess /home/bangherangstudio/americascup-napoli.it/.htaccess /home/bangherangstudio/reilab.eu/.htaccess /home/bangherangstudio/itheritage.net/.htaccess /home/bangherangstudio/lavoriamoinsieme/web/public/.htaccess /home/bangherangstudio/v3.paladeri.it/.htaccess /home/bangherangstudio/trattoriadelgolfo.net/.htaccess /home/bangherangstudio/anticocantieredellegnoaprea.it/.htaccess /home/bangherangstudio/prn-arzano.it/.htaccess /home/bangherangstudio/gialauyacht.com/admin/.htaccess /home/bangherangstudio/gialauyacht.com/.htaccess /home/bangherangstudio/bbanticacapri.it/.htaccess /home/bangherangstudio/urbancastingsolution.com/.htaccess /home/bangherangstudio/conf.bngh.it/.htaccess /home/bangherangstudio/fondazionemassimoleone.it/.htaccess /home/bangherangstudio/statistiche.vitosimeolisaloon/.htaccess /home/bangherangstudio/eventi.wpeitalia.eu/.htaccess /home/bangherangstudio/home/bangherangstudio/v5.paladeri.it/public/.htaccess /home/bangherangstudio/immobilicp-marcianise.it/.htaccess /home/bangherangstudio/gdscript.bngh.it/.htaccess /home/bangherangstudio/flash.fruititaly.it/.htaccess /home/bangherangstudio/vidama.it/.htaccess /home/bangherangstudio/seaoffice.com/.htaccess /home/bangherangstudio/dream-house-immobiliare.it/.htaccess /home/bangherangstudio/gieffevending.it/.htaccess /home/bangherangstudio/cloud.bngh.it/.htaccess /home/bangherangstudio/finimm.net/.htaccess /home/bangherangstudio/msp.villasilvia.it/public/.htaccess /home/bangherangstudio/fisiosteel.it/.htaccess /home/bangherangstudio/opendata.paladeri.it/.htaccess /home/bangherangstudio/ures.gruppoindustrialecirinopomicino.com/public/.htaccess /home/bangherangstudio/sileno.villasilvia.it/.htaccess /home/bangherangstudio/3sbon.it/.htaccess /home/bangherangstudio/racedigitalplatform.com/.htaccess /home/bangherangstudio/curadisfunzioneerettile.it/.htaccess /home/bangherangstudio/procidaevents.com/.htaccess /home/bangherangstudio/bangherangstudio/connector/public/.htaccess /home/bangherangstudio/bangherangstudio/.it/v1/public/.htaccess /home/bangherangstudio/ortart.villasilvia.it/.htaccess /home/bangherangstudio/procidavelacup.it/.htaccess /home/bangherangstudio/frolasranch.it/.htaccess /home/bangherangstudio/nutrizionistaragosta.it/.htaccess /home/bangherangstudio/immobilicp-arzano.bngh.it/.htaccess /home/bangherangstudio/fabrizioiacono.it/.htaccess /home/bangherangstudio/giuseppeattanasio.com/.htaccess /home/bangherangstudio/osservatoriosonda.com/.htaccess /home/bangherangstudio/connect.bangherangstudio.it/.htaccess /home/bangherangstudio/eventi.paladeri.it/.htaccess /home/bangherangstudio/procidaevents.it/.htaccess /home/bangherangstudio/gaa.wpeitalia.eu/.htaccess /home/bangherangstudio/caffediportacastello.it/.htaccess /home/bangherangstudio/rashmimetaliks.it/.htaccess /home/bangherangstudio/v2.tregolfisailingweek.com/.htaccess /home/bangherangstudio/menu.trattoriadelgolfo.net/.htaccess /home/bangherangstudio/bnghvps.it/.htaccess /home/bangherangstudio/clienti.fruititaly.it/.htaccess /home/bangherangstudio/nagora/v2/public/.htaccess /home/bangherangstudio/chirurgiavaricocele.it/.htaccess /home/bangherangstudio/tcnapp.it/public/.htaccess /home/bangherangstudio/cirinopomicino.com/.htaccess /home/bangherangstudio/smartmap.bngh.it/.htaccess /home/bangherangstudio/terapiaipb.bngh.it/.htaccess /home/bangherangstudio/cirinopomicino.it/.htaccess /home/bangherangstudio/chirurgiaminiinvasivaprostata.it/.htaccess /home/bangherangstudio/smartmap-chiaia/backend/.htaccess /home/bangherangstudio/fruititaly.it/.htaccess /home/bangherangstudio/review.volkancrosstrain.it/.htaccess /home/bangherangstudio/curalapeyronie.it/.htaccess /home/bangherangstudio/racedigitalplatform/v2/public/.htaccess /home/bangherangstudio/racedigitalplatform/v3/public/.htaccess /home/bangherangstudio/racedigitalplatform/v1/public/.htaccess /home/bangherangstudio/valeriocaprara.it/.htaccess /home/bangherangstudio/entry.2025finneuropeans.org/public/.htaccess /home/bangherangstudio/svs.bngh.it/.htaccess /home/bangherangstudio/castproof.io/.htaccess /home/bangherangstudio/rashmimetaliks.eu/.htaccess /home/bangherangstudio/fruititaly/v2/public/.htaccess /home/bangherangstudio/fruititaly/v1/public/.htaccess /home/bangherangstudio/mail.bngh.it/.htaccess /home/bangherangstudio/studioviparelli.it/.htaccess /home/bangherangstudio/michelerussoimmobiliare.it/.htaccess /home/bangherangstudio/bim.paladeri.it/.htaccess /home/bangherangstudio/parquettistanapoli.it/.htaccess /home/bangherangstudio/mp.crvitalia.it/.htaccess /home/bangherangstudio/kuluridis.it/.htaccess /home/bangherangstudio/mattoneverdesrl.it/.htaccess /home/bangherangstudio/holdingcirinopomicino.com/.htaccess /home/bangherangstudio/innovazionediritto/v1/.htaccess /home/bangherangstudio/cirinopomicino.eu/.htaccess /home/bangherangstudio/old.seaoffice.com/.htaccess === 19. UTENTI CPANEL === bangherangstudio === 20. CHIAVI SSH OVUNQUE === /root/.ssh/authorized_keys.bak /root/.ssh/authorized_keys /root/.ssh/id_rsa.pub /root/.ssh/id_rsa /home/bangherangstudio/.ssh/authorized_keys /home/bangherangstudio/bangherangstudio.it/app/vendor/league/flysystem/test_files/sftp/id_rsa.pub /home/bangherangstudio/bangherangstudio.it/app/vendor/league/flysystem/test_files/sftp/id_rsa /backup/2026-04-28/accounts/bangherangstudio/homedir/.ssh/authorized_keys /backup/2026-04-28/accounts/bangherangstudio/homedir/bangherangstudio.it/app/vendor/league/flysystem/test_files/sftp/id_rsa.pub /backup/2026-04-28/accounts/bangherangstudio/homedir/bangherangstudio.it/app/vendor/league/flysystem/test_files/sftp/id_rsa /backup/2026-04-30/accounts/bangherangstudio/homedir/.ssh/authorized_keys /backup/2026-04-30/accounts/bangherangstudio/homedir/bangherangstudio.it/app/vendor/league/flysystem/test_files/sftp/id_rsa.pub /backup/2026-04-30/accounts/bangherangstudio/homedir/bangherangstudio.it/app/vendor/league/flysystem/test_files/sftp/id_rsa === 21. IPTABLES REGOLE ATTUALI === # Warning: iptables-legacy tables present, use iptables-legacy to see them Chain INPUT (policy DROP) num target prot opt source destination 1 ACCEPT tcp -- 195.32.6.0/24 0.0.0.0/0 tcp dpt:2083 2 ACCEPT tcp -- 195.32.6.0/24 0.0.0.0/0 tcp dpt:2087 3 ACCEPT tcp -- 93.62.146.0/24 0.0.0.0/0 tcp dpt:2083 4 ACCEPT tcp -- 93.62.146.0/24 0.0.0.0/0 tcp dpt:2087 5 ACCEPT tcp -- 2.237.0.0/16 0.0.0.0/0 tcp dpt:2083 6 ACCEPT tcp -- 2.237.0.0/16 0.0.0.0/0 tcp dpt:2087 7 ACCEPT tcp -- 194.243.83.0/24 0.0.0.0/0 tcp dpt:2083 8 ACCEPT tcp -- 194.243.83.0/24 0.0.0.0/0 tcp dpt:2087 9 ACCEPT tcp -- 93.35.0.0/16 0.0.0.0/0 tcp dpt:2083 10 ACCEPT tcp -- 93.35.0.0/16 0.0.0.0/0 tcp dpt:2087 11 ACCEPT tcp -- 93.36.246.0/24 0.0.0.0/0 tcp dpt:2083 12 ACCEPT tcp -- 93.36.246.0/24 0.0.0.0/0 tcp dpt:2087 13 ACCEPT tcp -- 46.4.50.47 0.0.0.0/0 tcp dpt:2083 14 ACCEPT tcp -- 46.4.50.47 0.0.0.0/0 tcp dpt:2087 15 ACCEPT tcp -- 1.0.0.1 0.0.0.0/0 tcp dpt:53 16 ACCEPT udp -- 1.0.0.1 0.0.0.0/0 udp dpt:53 17 ACCEPT tcp -- 1.0.0.1 0.0.0.0/0 tcp spt:53 18 ACCEPT udp -- 1.0.0.1 0.0.0.0/0 udp spt:53 19 ACCEPT tcp -- 1.1.1.1 0.0.0.0/0 tcp dpt:53 20 ACCEPT udp -- 1.1.1.1 0.0.0.0/0 udp dpt:53 21 ACCEPT tcp -- 1.1.1.1 0.0.0.0/0 tcp spt:53 22 ACCEPT udp -- 1.1.1.1 0.0.0.0/0 udp spt:53 23 LOCALINPUT all -- 0.0.0.0/0 0.0.0.0/0 24 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 25 SYNFLOOD tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 26 INVALID tcp -- 0.0.0.0/0 0.0.0.0/0 27 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmptype 8 limit: avg 1/sec burst 5 28 LOGDROPIN icmp -- 0.0.0.0/0 0.0.0.0/0 icmptype 8 29 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 30 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 31 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:25 32 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:20 33 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:21 34 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:22 35 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:53 36 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:80 37 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:110 38 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:143 39 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:443 40 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:465 41 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:587 42 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:853 43 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:993 44 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:995 45 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2077 46 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2078 47 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2079 48 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2080 49 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2082 50 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2086 51 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2095 52 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2096 53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2080 54 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:2079 55 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:7700 56 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:8443 57 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpt:13714 58 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW tcp dpts:49152:65534 59 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW udp dpt:20 60 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW udp dpt:21 61 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW udp dpt:53 62 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW udp dpt:80 63 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW udp dpt:443 64 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW udp dpt:853 65 LOGDROPIN all -- 0.0.0.0/0 0.0.0.0/0 66 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2087 67 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2083 68 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2086 69 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2082 70 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2095 71 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2096 === 22. CSF DENY LIST === 223.17.5.126 # lfd: (sshd) Failed SSH login from 223.17.5.126 (HK/Hong Kong/126-5-17-223-on-nets.com): 5 in the last 3600 secs - Fri May 1 09:27:12 2026 101.36.124.127 # lfd: (sshd) Failed SSH login from 101.36.124.127 (HK/Hong Kong/mail6.bahia-paradise.com): 5 in the last 3600 secs - Fri May 1 09:53:46 2026 202.165.15.132 # lfd: (sshd) Failed SSH login from 202.165.15.132 (MY/Malaysia/-): 5 in the last 3600 secs - Fri May 1 10:04:35 2026 52.176.211.73 # lfd: (sshd) Failed SSH login from 52.176.211.73 (US/United States/-): 5 in the last 3600 secs - Fri May 1 10:04:45 2026 190.108.60.101 # lfd: (sshd) Failed SSH login from 190.108.60.101 (AR/Argentina/host-60-101.adc.net.ar): 5 in the last 3600 secs - Fri May 1 10:08:38 2026 112.121.177.138 # lfd: (sshd) Failed SSH login from 112.121.177.138 (HK/Hong Kong/-): 5 in the last 3600 secs - Fri May 1 10:19:50 2026 72.79.42.117 # lfd: (sshd) Failed SSH login from 72.79.42.117 (US/United States/static-72-79-42-117.nwrknj.fios.verizon.net): 5 in the last 3600 secs - Fri May 1 10:21:06 2026 121.32.49.226 # lfd: (sshd) Failed SSH login from 121.32.49.226 (CN/China/-): 5 in the last 3600 secs - Fri May 1 10:24:28 2026 24.19.160.116 # lfd: (sshd) Failed SSH login from 24.19.160.116 (US/United States/c-24-19-160-116.hsd1.wa.comcast.net): 5 in the last 3600 secs - Fri May 1 10:25:38 2026 51.15.145.170 # lfd: (sshd) Failed SSH login from 51.15.145.170 (FR/France/51-15-145-170.rev.poneytelecom.eu): 5 in the last 3600 secs - Fri May 1 10:29:55 2026 14.189.13.255 # lfd: (sshd) Failed SSH login from 14.189.13.255 (VN/Vietnam/static.vnpt.vn): 5 in the last 3600 secs - Fri May 1 10:36:10 2026 45.198.144.227 # lfd: (cpanel) Failed cPanel login from 45.198.144.227 (ID/Indonesia/-): 5 in the last 3600 secs - Fri May 1 10:36:45 2026 14.116.172.24 # lfd: (sshd) Failed SSH login from 14.116.172.24 (CN/China/-): 5 in the last 3600 secs - Fri May 1 10:46:59 2026 14.29.195.221 # lfd: (sshd) Failed SSH login from 14.29.195.221 (CN/China/-): 5 in the last 3600 secs - Fri May 1 11:20:20 2026 51.89.19.199 # UK OVH - Fri May 1 17:46:07 2026 51.161.117.166 # Canada OVH - Fri May 1 17:46:07 2026 131.163.88.225 # Norvegia - Fri May 1 17:46:08 2026 2a05:7cc0:0:185:80:128:73:1 # IPv6 ESNET - Fri May 1 17:46:08 2026 42.96.61.68 # Vietnam API - Fri May 1 17:46:09 2026 87.246.54.153 # lfd: *Port Scan* detected from 87.246.54.153 (BG/Bulgaria/-). 21 hits in the last 758 seconds - Fri May 1 17:53:04 2026 141.98.11.11 # lfd: (smtpauth) Failed SMTP AUTH login from 141.98.11.11 (LT/Lithuania/axon-stall.riddlecamera.net): 5 in the last 3600 secs - Fri May 1 18:01:31 2026 43.156.203.174 # lfd: (sshd) Failed SSH login from 43.156.203.174 (SG/Singapore/-): 5 in the last 3600 secs - Fri May 1 18:03:22 2026 14.103.123.67 # lfd: (sshd) Failed SSH login from 14.103.123.67 (CN/China/-): 5 in the last 3600 secs - Fri May 1 18:20:08 2026 212.105.155.26 # intruso attivo - Fri May 1 18:34:56 2026 212.105.153.107 # intruso ieri - Fri May 1 18:35:10 2026 212.105.0.0/16 # range intruso - Fri May 1 18:37:03 2026 101.36.228.201 # lfd: (sshd) Failed SSH login from 101.36.228.201 (CN/China/-): 5 in the last 3600 secs - Fri May 1 18:55:43 2026 192.109.200.50 # lfd: (sshd) Failed SSH login from 192.109.200.50 (NL/The Netherlands/elitequill.ptr.network): 5 in the last 3600 secs - Fri May 1 19:12:58 2026 115.190.151.242 # lfd: (sshd) Failed SSH login from 115.190.151.242 (CN/China/-): 5 in the last 3600 secs - Fri May 1 19:21:40 2026 85.204.70.88 # lfd: (cpanel) Failed cPanel login from 85.204.70.88 (FR/France/-): 5 in the last 3600 secs - Fri May 1 20:47:27 2026 === 23. DISK USAGE === Filesystem Size Used Avail Use% Mounted on devtmpfs 126G 0 126G 0% /dev tmpfs 126G 0 126G 0% /dev/shm tmpfs 126G 6.6M 126G 1% /run tmpfs 126G 0 126G 0% /sys/fs/cgroup /dev/md3 1.8T 1.1T 613G 64% / /dev/md2 989M 679M 260M 73% /boot /dev/md0 256M 5.9M 250M 3% /boot/efi /dev/loop0 3.9G 2.6G 1.2G 70% /tmp === 24. UPTIME E LOAD === 21:03:57 up 3:24, 0 users, load average: 0.95, 0.74, 0.62 0.95 0.74 0.62 1/1266 158894 ========================================== AUDIT COMPLETATO - Fri May 1 21:03:57 CEST 2026 ==========================================